02 — Experience
Experience
Inventyv Software Services Pvt. LTD.
Jr. Cyber Security Engineer December 2024 — Present Ahmedabad, Gujarat
- Performed end-to-end security testing across internal web and mobile products, uncovering high-impact broken access control and authorization flaws, and drove remediation that reduced repeat findings by 30%.
- Led security assessments across a 70+ subdomain attack surface, performing web and API penetration testing that surfaced critical authentication and authorization weaknesses, validated against the OWASP Top 10.
- Discovered a privilege-escalation vulnerability that could grant unauthorized administrative access, and reported it through to a verified fix — closing a path to sensitive account control.
- Identified IDOR (Insecure Direct Object Reference) flaws exposing other users' data, and partnered with developers to enforce proper object-level authorization.
- Uncovered a SQL injection vulnerability in an internal Android application and confirmed its remediation.
- Mapped attack paths using the MITRE ATT&CK framework to strengthen detection, monitoring, and defensive coverage.
- Developed and tested OPA Gatekeeper constraint templates to enforce Kubernetes least-privilege and policy compliance across workloads.
Academic
Education
Charotar University of Science and Technology (CHARUSAT)
Bachelor of Technology in Computer Science & Engineering 2021 — 2025 Changa, Gujarat
GPA
8.2
/ 10.0