Harshwardhan Patil

Application Security Analyst with 1 year of experience conducting security testing of a live multi-role B2B e-commerce platform, identifying access control, API and authentication vulnerabilities. Solved 200+ PortSwigger labs and completed web and API penetration testing projects with proof-of-concept evidence, risk assessments and remediation recommendations. Skilled in Burp Suite Professional, Nmap and the OWASP Top 10, working with developers to resolve findings.

E&TC graduate with a strong foundation in networking and embedded systems. Seeking an Application Security Analyst role.

Junior Security Analyst - ScriptBuild Software Pvt. Ltd.

(2025-10)

PrismaNote2: B2B e-commerce platform with role-based access for Retailers, Suppliers, Admin and Super Admin

• Conducted application security testing of a multi-role B2B platform across 4 user roles, identifying vulnerabilities including BOLA, IDOR and privilege escalation using Burp Suite Professional and Postman
• Tested REST APIs against the OWASP API Security Top 10, uncovering authorization and sensitive data exposure flaws
• Verified tenant data isolation to prevent cross-role data leakage (retailer inventory, employee records)
• Conducted authentication and session security testing, including JWT token validation and role-tampering checks
• Performed risk assessments on findings, documenting severity rating, proof of concept and remediation recommendations for each issue
• Collaborated with developers to explain findings, advise on fixes and verify remediation through retesting

B.Tech - Electronics and Telecommunication Engineering - R C Patel Institute of Technology, Shirpur, Maharashtra (2022 - 2026)

HSC - Pratap College, Amalner, Jalgaon (2022)

SSC - Sane Guruji Nutan High School, Amalner, Jalgaon (2020)