Kush Sehra

Automotive Application Security — VAPT (Web, REST/SOAP/gRPC APIs, Android/iOS, Thick/Thin Client, Network Infra, Azure Cloud), Red Teaming & CIS-Benchmark Configuration Review

Conducted compliance-driven Vulnerability Assessment, Penetration Testing (VAPT), and Red Teaming for Fintech clients (Payment Banks, National Banks & UPI Payment Platforms), Healthcare, and E-commerce sectors — covering web applications, APIs, mobile apps, thick/thin client applications, network infrastructure, and cloud environments. Included CIS-Benchmark configuration reviews and security assessments of payment gateway & UPI payment systems, aligned with PCI DSS,

Cybersecurity professional specializing in Penetration Testing, Red Teaming, Bug Hunting, and OSINT with experience securing 800+ applications across web, mobile, APIs, cloud, wireless, and embedded systems. Featured in Apple Security Advisories (2021–2025) and recognized in the Hall of Fame programs of Meta, Starbucks, Grab, Pinterest, Arlo, Regions, JetBlue, Ziff Davis, Corebridge Financial, Etsy, and First Citizens Bank (via Synack) for impactful vulnerability disclosures and security research.