ashhad ali

Perform Vulnerability Assessments: Identify and analyze security vulnerabilities in web and mobile applications using tools like OWASP ZAP, Burp Suite, or Nessus.Conduct Penetration Testing: Simulate cyberattacks to identify application security weaknesses and recommend mitigations.Implement Secure Coding Practices: Collaborate with developers to integrate secure coding standards (e.g., OWASP Top Ten) into the SDLC.Security Risk Assessments: Evaluate application risk profiles and develop mitigation plans to

Performed end-to-end VAPT across Web, API, Network, and Mobile environments using Burp Suite, OWASP ZAP, Metasploit, and Nuclei. Key Contributions: • Identified and assisted in remediating 50+ vulnerabilities (SQLi, IDOR, Broken Auth, CSRF, XSS). • Conducted manual testing (OWASP WSTG) & secure code reviews for Node.js, Angular, PHP. • Hardened infrastructure security (firewalls, patch gaps, misconfigured services). • Built custom Python/Bash scripts to automate recon & scanning.