Sid bhuyar

Cyber Security Analyst

Network Intelligence Pvt. Ltd.

May 2025 - Present

Perform VAPT for web applications and infrastructure, including black-box and grey-box assessments. Conduct WAPT covering authentication, authorization, access control, session management, input validation, file uploads, and security configuration. Perform Mobile Application Penetration Testing (MAPT) for Android and iOS applications, assessing insecure data storage, weak authentication, and improper platform usage. Review mobile application behavior and security controls to identify weaknesses that may expose user data or enable unauthorized access. Execute API security testing using Burp Suite and Postman, assessing authentication, authorization, access control, HTTP methods, and request/response handling. Identify and validate vulnerabilities including SQL Injection, XSS, IDOR/Broken Access Control, security misconfiguration, session-management weaknesses, insecure cookies, file-upload flaws, and missing security headers. Conduct Source Code Reviews (SCR) for SQL Injection, Command Injection, Path Traversal, improper input validation, and hardcoded sensitive information. Perform Secure Configuration Reviews (SCD) for security devices and infrastructure, including FortiGate firewalls and Cisco Switches/Nexus. Manage vulnerability scanning and reporting using Nessus and Tenable.sc, including scan policy configuration, asset grouping, scan scheduling, and vulnerability trend reporting. Conduct security revalidation to verify remediation and prepare detailed reports with severity, CVSS scoring, business impact, evidence/PoC, affected components, and remediation recommendations.