Murali Vantaku

VAPT Analyst

Telangana, India 1+ yrs exp 84 · Excellent

About

Certified VAPT Analyst and Application Security professional with hands-on experience in vulnerability assessments and penetration testing across web applications, APIs, networks, mobile applications, and infrastructure. Skilled in conducting vulnerability assessments, validating security risks, identifying and exploiting vulnerabilities, and delivering actionable remediation recommendations. Strong understanding of OWASP Top 10, CVSS scoring, penetration testing methodologies, secure coding practices, and industry-standard offensive security tools. Experienced in applying AI and Large Language Models including AWS Bedrock to automate security workflows and improve testing efficiency.

Skills & Expertise (47)

Penetration Testing Advanced

9.0/10

Years Exp

Vulnerability Assessment Advanced

9.0/10

Years Exp

SQL Injection Advanced

8.5/10

Years Exp

OWASP ZAP Advanced

8.5/10

Years Exp

Burp Suite Professional Advanced

8.5/10

Years Exp

Metasploit Framework Advanced

8.0/10

Years Exp

Python Advanced

8.0/10

Years Exp

Nmap Advanced

8.0/10

Years Exp

Privilege Escalation AWS (S3 LLM Integration Container Security Network Penetration Testing Kali Linux Ubuntu CentOS Threat Hunting Windows Server Wazuh Log Analysis SQL Regular Expressions SOC Operations Automation Script Development Report Generation Endpoint Detection Splunk Postman Black-Box Testing White-Box Testing Attack Surface Mapping Exploitation validation CVSS scoring Evidence Documentation Nessus Nikto SQLmap AWS (EC2 WIRESHARK Gobuster OWASP Top 10 Vulnerabilities Authentication Testing Vulnerability Triage Risk Analysis Remediation Planning Executive Reporting Patch Validation

Work Experience

VAPT Analyst

Tata Consultancy Services (TCS)

Nov 2024 - Present

Executed 40+ end-to-end Vulnerability Assessment and Penetration Testing (VAPT) engagements across web applications, APIs, mobile applications, networks, and infrastructure environments, identifying and validating security vulnerabilities. Identified and tested unique attack vectors against OWASP Top 10 vulnerabilities using Burp Suite, OWASP ZAP, Nmap, Metasploit, and SQLMap, delivering 40+ comprehensive security assessment reports. Developed proof-of-concept exploits for 95% of identified vulnerabilities, reducing time-to-remediation by 35% through clear technical documentation and CVSS-based risk stratification. Collaborated across 10+ client organizations to achieve 92% vulnerability remediation success rate through iterative retesting, scope validation, and continuous improvement of testing methodologies. Automated security workflow processes using AWS Bedrock LLMs and Python scripts, accelerating vulnerability analysis and report generation by 50%, reducing manual effort from 8 hours to 4 hours per assessment.