Aaron Victor

Performance-driven Offensive Security Practitioner with hands-on experience executing full-spectrum penetration testing (black-box, grey-box, white-box), security architecture design reviews, and automated vulnerability orchestration. Proven track record of identifying critical authentication, authorization, and business logic flaws within complex APIs and cloud native microservices. Adept at bridging the gap between security and engineering by building custom testing frameworks and integrating automated SAST/DAST suites seamlessly into active modern CI/CD pipelines to secure high-scale transactional applications.

Penetration Tester at Digispert Technology (2026-06 – Present)

• Executed 14+ comprehensive black-box, grey-box, and white-box penetration tests on production web applications, mobile apps, and microservice APIs, uncovering 45+ high-to-critical security vulnerabilities (OWASP Top 10).
• Designed and integrated automated SAST/DAST tooling into active deployment pipelines, decreasing post-release application security flaws by 38% and optimizing the secure SDLC timeline.
• Partnered cross-functionally with dev, DevOps, and infrastructure teams to validate remediation efforts, accelerating vulnerability patch compliance within SLA timelines by 42%.
• Conducted thorough secure architecture and design reviews for 6 critical cloud-hosted business applications, mitigating systemic authorization and data security risks before production deployment.
• Generated comprehensive technical reports complete with custom Proof-of-Concept (PoC) code and explicit business impact metrics, bridging communication gaps for C-suite and engineering teams.

Ethical Hacking Instructor at Wedigraf Technologies (2025-10 – 2025-11)

• Architected and delivered an intensive 40-hour offensive security and penetration testing curriculum for 20+ industry professionals, achieving a 94% final student competency rating.
• Engineered 5+ custom, virtualized active lab environments mimicking real-world corporate infrastructures to provide hands-on experience in Active Directory security assessments, reconnaissance, and vulnerability exploitation.
• Trained students on standard compliance frameworks (NIST, OWASP) and mapped practical attack paths directly to MITRE ATT&CK vectors, streamlining professional development and security certifications readiness.

Junior Penetration Tester Intern at Encrypt Edge Lab (2025-08 – 2025-09)

• Assisted senior security consultants on 8 large-scale corporate web and network penetration testing engagements, discovering 18 web application vulnerabilities, including SQLi, Broken Object Level Authorization (BOLA), and XSS. Utilized Burp Suite Professional, Nmap, and Metasploit to conduct systematic reconnaissance and vulnerability validation across 150+ network endpoints and API endpoints.
• Authored 10+ granular penetration testing reports with clean technical write-ups, providing clients with robust, risk prioritized remediation strategies compliant with PCI DSS and ISO 27001 standards.