Mangesh Damdar

Security Engineer

Axiomtech IT Solutions

Dec 2023 - Present

Conduct Web, API, Mobile, and Network Vulnerability Assessment and Penetration Testing (VAPT) using manual and automated testing techniques. Perform Web Application Security Testing aligned with OWASP Top 10, identifying vulnerabilities such as SQL Injection, XSS, CSRF, IDOR, SSRF, Authentication, Authorization, and Security Misconfigurations. Execute API Security Testing based on OWASP API Security Top 10, identifying vulnerabilities including BOLA, IDOR, Injection flaws, and Authentication/Authorization issues. Conduct Network Vulnerability Assessments using Nmap and Nessus for service enumeration, vulnerability identification, validation, and risk analysis. Utilize Burp Suite Professional, Postman, SQLMap, and OWASP ZAP for security testing, request manipulation, and vulnerability validation. Assign CVSS v3.1 risk ratings and prepare comprehensive VAPT reports with proof of concept (PoC), business impact, and remediation recommendations. Collaborate with clients and development teams to validate findings, eliminate false positives, and support timely vulnerability remediation.