- 🔐 SDET with a focused shift into AI Application Security — I test, break, and harden AI-powered systems
- 🤖 Hands-on with security testing of LLM-powered backends, voice AI agents, and REST APIs
- 🛡️ Meta Certified (Secure Backend Development) | TryHackMe — Offensive Pentesting & CompTIA Pentest+ paths completed
- 🔬 Actively exploring OWASP LLM Top 10, Prompt Injection, AI Red Teaming, and SAST/DAST tooling
- 📍 Based in India | Open to Hybrid / Remote AI-AppSec roles
| Domain | Skills |
|---|---|
| AI / LLM Security | Prompt Injection, OWASP LLM Top 10, LLM API pentesting, Agentic workflow threat modelling |
| API Security | REST API pentesting, JWT misconfigs, Auth bypass, OWASP API Top 10 |
| Application Security | SAST, DAST, IAST, SCA, Threat Modelling, Secure Code Review, Shift-Left Security |
| Voice AI Security | API surface testing across Vapi, LiveKit, Ultravox, Pipecat |
| Test Automation | REST Assured, PyTest, Postman, Selenium, TestNG |
| Bug Management | JIRA security tickets, severity triage, structured reproduction steps |
| Certification | Issuer | Status | Link |
|---|---|---|---|
| Offensive Pentesting Path | TryHackMe | ✅ Completed | View |
| CompTIA Pentest+ Path | TryHackMe | ✅ Completed | View |
| Secure Backend Development | Meta | ✅ Completed | View |
| AI-900: Azure AI Fundamentals | Microsoft | ⏳ In Progress | View |
| AI Red Teamer | HackTheBox | 📌 Up Next | View |
SDET @ Excelerate Technologies — Bengaluru, India
- Integrating Security into STLC as much as possible
- Continuous LLM Bug exposure, communication & mitigation
- Targeting code-level reviews covering CRUD logic and database interaction patterns
⭐ Open to Intermediate AI-AppSec / LLM Security / SDET-Security hybrid roles — Remote/Hybrid preferred