Worked on end-to-end Vulnerability Assessment and Penetration Testing (VAPT) activities across Web Applications, APIs, Android/iOS Mobile Applications, and Network Infrastructure. Collaborated with clients to understand project requirements, define testing scope, establish timelines, discuss testing methodologies, coordinate assessments, and ensure testing activities were aligned with agreed objectives and security requirements.

Performed static and dynamic security testing, manual vulnerability assessment, vulnerability validation, exploitation verification, and risk analysis. Identified, reproduced, analyzed, and documented security vulnerabilities while assessing their technical severity, exploitability, potential attack paths, and business impact. Prepared detailed technical security reports containing vulnerability descriptions, affected components, reproduction steps, evidence, risk ratings, impact analysis, and practical remediation recommendations.

Conducted security testing across authentication, authorization, access control, session management, input validation, business logic, API security, information disclosure, security misconfigurations, and common OWASP security risks. Reviewed application workflows, user roles, API endpoints, security controls, and access restrictions to identify vulnerabilities that may not be detected through automated scanning alone.

Performed security assessments using a combination of manual testing techniques and appropriate security tools. Reviewed and validated automated scanner findings to reduce false positives and ensure reported vulnerabilities were reproducible and relevant. Maintained proper testing evidence, vulnerability records, assessment notes, and remediation tracking throughout the engagement.

Conducted vulnerability review sessions with clients, developers, and internal security teams. Explained technical findings in clear terms, demonstrated vulnerabilities where appropriate, discussed their potential business impact, and assisted teams in understanding remediation requirements and priorities.

Coordinated remediation tracking and retesting activities, verified implemented fixes, documented retest results, and confirmed whether vulnerabilities were successfully resolved. Assisted with security documentation, assessment planning, risk prioritization, technical walkthroughs, executive summaries, and security knowledge-sharing sessions for internal teams.

Worked closely with technical and business stakeholders throughout the complete assessment lifecycle, from initial scope discussion and reconnaissance through testing, reporting, remediation, retesting, and final closure .