Veena Pothunuru

Application Security / VAPT role

Hyderabad, India 2+ yrs exp 90 · Outstanding

About

Application Security and Vulnerability Assessment professional with 2+ years of Software Development experience, combining secure coding practices with hands-on expertise in web application penetration testing and vulnerability validation. Hands-on exposure to reconnaissance, enumeration, vulnerability assessment, penetration testing methodologies, exploitation techniques, remediation validation, and security reporting across web application environments. Strong understanding of OWASP Top 10, secure SDLC, authentication mechanisms, API security, Linux environments, networking fundamentals, and attacker methodologies for securing enterprise applications.

Skills & Expertise (41)

OWASP ZAP Intermediate

6.5/10

Years Exp

Burp Suite Intermediate

6.5/10

Years Exp

Application Security Intermediate

6.5/10

Years Exp

Web Application Security Testing Intermediate

6.5/10

Years Exp

Vulnerability Assessment & Penetration Testing Intermediate

6.5/10

Years Exp

Nmap Intermediate

6.0/10

Years Exp

WIRESHARK Intermediate

6.0/10

Years Exp

Java Intermediate

6.0/10

Years Exp

Metasploit Framework Intermediate

5.5/10

Years Exp

bash scripting Intermediate

5.5/10

Years Exp

REST APIs Threat Analysis Microservices Architecture Event-Driven Architecture AWS Secrets Manager Token-based authentication Secure Software Development Lifecycle OWASP Top 10 Secure Coding API Security Authentication Security Linux Security Network Security Fundamentals Security Tools DNS Gobuster FFUF Netcat Wazuh SIEM Log Analysis alert monitoring TCP IP Spring Boot HTTP HTTPS Ports & Protocols Network Enumeration Kali Linux Ubuntu Windows

Work Experience

Software Developer

Digit Insurance

Jun 2023 - Dec 2025

Engineered and enhanced enterprise Java-based applications built on Spring Boot, REST APIs, and Microservices Architecture, while integrating secure coding practices by eliminating hardcoded credentials through AWS Secrets Manager, strengthening credential protection and application security. Collaborated with cross-functional development and security teams to implement application security improvements by remediating SQL Injection, input validation weaknesses, SAST findings, and authentication vulnerabilities, while replacing Basic Authentication with token-based authentication to reinforce secure access control mechanisms. Strengthened application resilience by hardening server & application configurations to minimize information disclosure risks, supporting platform upgrade initiatives, and ensuring service compatibility, reliability, & stable deployments across enterprise environments. Investigated, debugged, and resolved production defects, including NullPointerExceptions and application issues, while gaining practical exposure to secure software development principles, vulnerability remediation, and security-first engineering practices that support a transition into Application Security (AppSec) and Vulnerability Assessment & Penetration Testing (VAPT) roles.