Key Responsibilities
Penetration Testing & Offensive Security
• Plan and execute full-scope penetration tests across web applications, APIs, mobile apps, cloud infrastructure, and internal networks.
• Conduct threat modelling exercises and attack surface analysis for client applications and platforms.
• Perform manual and tool-assisted vulnerability assessments, including business logic flaws, authentication bypasses, injection attacks, and privilege escalation chains.
• Develop proof-of-concept exploits and document findings with explicit, actionable remediation guidance tailored to the client's tech stack.
• Simulate real-world adversarial scenarios (red team operations) targeting people, processes, and technology.

Application Security & DevSecOps
• Embed security into SDLC processes by designing and implementing Secure-SDLC frameworks, security gates, and shift-left practices.
• Integrate and tune SAST, DAST, SCA, IaC scanning, and secrets detection tools within CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins, Azure DevOps).




• Review source code for security vulnerabilities across languages such as Python, Java, JavaScript/TypeScript, Go, and C#.
• Define and implement API security controls, including OAuth 2.0/OIDC configurations, rate limiting, and input validation frameworks.
• Conduct secure architecture reviews, threat modelling workshops (STRIDE, PASTA, LINDDUN), and cloud security assessments (AWS, Azure, GCP).
• Develop and deliver security training and awareness sessions for engineering, QA, and product teams.

Consulting & Client Engagement
• Act as the primary security point of contact for client engagements, managing stakeholder expectations and communication throughout the project lifecycle.
• Produce high-quality deliverables including executive reports, technical findings, remediation roadmaps, and security architecture diagrams.
• Contribute to pre-sales activities, including scoping calls, proposal development, and RFP responses.
• Collaborate

📌 Application Security Engineer (India)
🏢 Practical DevSecOps
📍 India