Rohit Raturi

Associate Infosec Consultant

2+ yrs exp 75 · Very Good

About

No bio added yet

Skills & Expertise (19)

Burp Suite Advanced

8.0/10

Years Exp

OWASP ZAP Advanced

8.0/10

Years Exp

Web Application Penetration Testing Advanced

8.0/10

Years Exp

Nmap Intermediate

7.5/10

Years Exp

Investigation Intermediate

7.5/10

Years Exp

Kali Linux Intermediate

7.0/10

Years Exp

Securonix Intermediate

6.5/10

Years Exp

Windows Parrot IP protocols TCP OSI Model Security Information And Event Management Nessus Dirbuster SQLmap WIRESHARK FTK Autopsy

Work Experience

Associate Infosec Consultant

Xiarch Bharat

Jan 2025 - Present

Conducted comprehensive Vulnerability Assessment and Penetration Testing (VAPT) across Web Applications, Android, iOS, APIs, and Network Infrastructure to identify security vulnerabilities and assess overall security posture. Utilized various tools such as Burp Suite, OWASP ZAP, and Nmap to perform automated and manual security assessments. Conducted Android Application Security Assessments using Burp Suite, Frida, Objection, JADX, ADB, and MobSF, covering static and dynamic analysis, insecure data storage, SSL pinning, root detection, WebView security, exported components, and insecure application configurations. Performed iOS Application Security Testing aligned with OWASP MASVS and MASTG, assessing insecure data storage, Keychain implementation, jailbreak detection, SSL/TLS pinning, application transport security, binary protections, and sensitive information exposure. Executed comprehensive API Security Testing for REST APIs based on the OWASP API Security Top 10, identifying Broken Object Level Authorization (BOLA/IDOR), Broken Authentication, Broken Function Level Authorization (BFLA), excessive data exposure, mass assignment, injection flaws, rate-limiting issues, and API business logic vulnerabilities. Conducted Network and Infrastructure VAPT for internal and external environments using Nmap, Nessus, and other security assessment tools to identify open ports, vulnerable services, insecure protocols, SSL/TLS weaknesses, security misconfigurations, and outdated software components. Successfully completed CERT-In empanelled security assessment projects, supporting compliance with government and industry cybersecurity requirements and delivering detailed vulnerability assessment and penetration testing reports. Conducted security assessments of Aadhaar Enabled Payment Service (AEPS) and financial applications, validating authentication, authorization, transaction security, API security, session management, and secure communication mechanisms. Successfully executed 100+ security assessment projects across Web Applications, Android, iOS, APIs, and Network Infrastructure, identifying critical and high-risk vulnerabilities and providing actionable remediation recommendations to strengthen clients’ overall security posture.

Associate Cyber Defence Analyst

Eventus Tech Sol Pvt. Ltd.

Sep 2023 - Apr 2024

Utilized a range of TrendMicro products including Apex One, Deep Security, Cloud App Security, XDR, and Email Security to bolster the organization’s security measures. Observing and assessing security incidents and events to detect intrusions, malicious actions, and vulnerabilities utilizing TrendMicro XDR, which offers robust capabilities for analyzing malware. Examined and analyzed phishing emails. Utilized the Deep Discovery Analyzer sandbox for both malware analysis and digital forensics purposes. Generated a document of root cause analysis and forwarded it to senior-level engineers.