Securing Technology,Empowering Innovation.

I'm a Security Engineer with 2.5+ years of experience working on Application Security and offensive testing. My work connects hands on exploitation with the process that turns findings into fixes.
I've performed penetration testing across 30+ high end web applications, including customer-facing platforms, banking gateways serving 50,000+ users globally. 

I assess web applications and APIs following OWASP Top 10 standards covering injection, broken access control, authentication,  SQL command injection, broken access control, authentication and session flaws, insecure deserialisation, CSRF and SSRF using Burp Suite and OWASP ZAP. I go beyond automated findings to chase business logic abuse, social engineering, privilege escalation, and multi-step attack chains that link low-severity issues into critical compromise.

Beyond exploitation, I own the full remediation lifecycle: tracking issues through JIRA, monitoring SLA compliance to keep fixes on schedule, and partnering with developers on practical, low-friction remediations. I build Power BI dashboards to give management real-time visibility into risk posture, open findings, and remediation progress,  turning technical findings into decisions leadership can act on. I'm increasingly drawn to AI Security, LLM vulnerabilities, prompt injection, and the new threat surface of intelligent systems.

I'm actively expanding my scope into AI Security , integrating my current workflows with AI-driven tooling, and building expertise in LLM security and compliance, including prompt injection and the emerging threat surface of intelligent systems.