Anurag Bansode

Application Security Engineer

India Full-time 3+ yrs exp 93 · Outstanding

About

Application Security Engineer with 2+ years of software development experience building and securing financial platforms, with experience in web applications and API security, vulnerability assessment and security research. Co-authored a security research paper on backdoor attacks in federated learning, accepted at ICIDTSM 2026. Seeking opportunities in Application Security, VAPT, and SOC roles.

Skills & Expertise (23)

OWASP Top 10 Advanced

8.5/10

Years Exp

Burp Suite Advanced

8.0/10

Years Exp

OWASP ZAP Advanced

8.0/10

Years Exp

AWS Intermediate

7.5/10

Years Exp

JavaScript Intermediate

7.0/10

Years Exp

Python Intermediate

7.0/10

Years Exp

OpenVAS Intermediate

6.5/10

Years Exp

Ansible Intermediate

6.0/10

Years Exp

Typescript Intermediate

6.0/10

Years Exp

Google Cloud Platform Intermediate

5.5/10

Years Exp

WIRESHARK Intermediate

5.5/10

Years Exp

C# Intermediate

5.5/10

Years Exp

.NET Core Intermediate

5.5/10

Years Exp

Grafana Intermediate

5.0/10

Years Exp

CERT-In Intermediate

5.0/10

Years Exp

Metasploit Intermediate

5.0/10

Years Exp

Bash Intermediate

5.0/10

Years Exp

Angular Intermediate

5.0/10

Years Exp

.NET Framework Intermediate

5.0/10

Years Exp

Django Intermediate

5.0/10

Years Exp

Flask Intermediate

5.0/10

Years Exp

Autopsy Intermediate

5.0/10

Years Exp

FTK Imager Intermediate

5.0/10

Years Exp

Work Experience

ANRF Research Intern

IIT Madras

Dec 2025 - May 2026

Built a trust-aware federated learning framework combining identity anchoring, activation-based anomaly scoring, and validator consensus to detect backdoor attacks. Integrated Hedera Distributed Ledger Technology for tamper-evident audit logging. Co-authored a paper accepted at ICIDTSM 2026.

Website Development Club Lead

IIIT Tiruchirappalli

Dec 2024 - May 2026

Led development, deployment, and post-deployment maintenance of the institute's website. Identified vulnerabilities in institutional web applications using OWASP ZAP and Burp Suite, including a critical redirection vulnerability, 3+ medium and 3+ low severity findings, and supported remediation efforts in compliance with CERT-In security requirements. Streamlined infrastructure management with Ansible. Served as a Teaching Assistant for Computer Networks and Database Management Systems.

Developer

HDFC Securities

Aug 2022 - Aug 2024

Independently investigated and reproduced security-team findings in internal applications and APIs using Burp Suite, including a CVSS 10.0 response-manipulation and redirection vulnerability that bypassed KYC validation workflow, along with additional medium and low severity issues. Implemented remediation through application code and server-configuration changes and collaborated with security team to validate fixes and perform remediation testing. Developed and secured the NRI Client Onboarding platform for onboarding NRI clients. Designed a centralized on-boarding system (ONEKYC) that streamlined client verification and compliance, hosted securely on AWS Cloud. Conducted web security testing on the NPS platform to identify security weaknesses and support remediation in compliance with OWASP Top 10 security practices and PFRDA regulations, enhancing overall web application resilience.