sparshika

Cyber Security Analyst

Chennai, India 2+ yrs exp 86 · Excellent

About

M.Tech Cybersecurity qualified Security Analyst with ~2 years of experience securing SEBI/RBI-regulated financial systems. Specializing in offensive security, I lead VAPT across Web, Mobile, and RESTful APIs using OWASP Top 10 methodology to uncover high-impact vulnerabilities including Account Takeover, IDOR, and BOLA across 50+ production applications. Proficient in manual exploitation, paired with automated vulnerability assessment. Experienced in supporting SEBI/RBI audit cycles and ISO/IEC 27001:2022 compliance validation. Backed by a SOC foundation in threat detection, CTI and with an early edge in AI/LLM security (prompt injection, OWASP LLM Top 10). Skilled at translating technical findings into risk-rated, actionable reports for clients and audit teams. Currently building AWS cloud security expertise to extend offensive testing into cloud-native environments.

Skills & Expertise (30)

OWASP Top 10 Intermediate

8.0/10

Years Exp

Burp Suite Intermediate

7.5/10

Years Exp

Frida Intermediate

7.5/10

Years Exp

MobSF Intermediate

7.5/10

Years Exp

Kali linux tools Intermediate

7.0/10

Years Exp

Microsoft Defender for cloud Intermediate

7.0/10

Years Exp

SentinelOne Intermediate

7.0/10

Years Exp

Phishing Simulation Intermediate

7.0/10

Years Exp

Wazuh Intermediate

7.0/10

Years Exp

Splunk Intermediate

7.0/10

Years Exp

Qualys Intermediate

7.0/10

Years Exp

GuardDuty Intermediate

7.0/10

Years Exp

IAM Intermediate

7.0/10

Years Exp

Nessus Intermediate

7.0/10

Years Exp

Postman Intermediate

6.5/10

Years Exp

Kibana Intermediate

6.5/10

Years Exp

Python Intermediate

6.5/10

Years Exp

Cymulate Intermediate

6.0/10

Years Exp

Objection Intermediate

6.0/10

Years Exp

jadx-gui Intermediate

6.0/10

Years Exp

CIS Benchmarks Intermediate

6.0/10

Years Exp

CVSS scoring Intermediate

6.0/10

Years Exp

Iso Intermediate

6.0/10

Years Exp

CTI Intermediate

6.0/10

Years Exp

Bash Intermediate

6.0/10

Years Exp

DHCP TCP IP DNS ICMP

Work Experience

Senior Security Analyst

Computer Age Management Systems (CAMS)

Sep 2024 - Present

Delivered high-impact findings across 50+ web applications by identifying and exploiting critical-risk vulnerabilities including Account Takeover (ATO), IDOR, and complex business logic flaws, enabling effective risk prioritization and remediation. Uncovered critical API-layer vulnerabilities including Broken Object Level Authorization (BOLA), excessive data exposure, and authentication flaws through targeted REST API penetration testing. Performed assessments on internally developed applications under SEBI, RBI-mandated audit cycles, delivering CVSS-scored reports with PoCs and remediation guidance, while validating outputs against ISO/IEC 27001:2022 controls like tracking NC closure status, testing cadence, and audit report completeness for regulatory readiness. Executed jailbreak detection bypass and SSL pinning bypass for dynamic analysis on Android/iOS using Frida, Objection, MobSF, and JADX-GUI, identifying insecure data storage and authentication bypass flaws. Referenced infrastructure security findings from CloudGuard CSPM and Microsoft Defender for Cloud to supplement on-premises and cloud-hosted vulnerability assessments, correlating gaps across hybrid environments. Operated SOC tooling Qualys, SentinelOne, Splunk, Wazuh. Designed, executed, and led an organization-wide phishing simulation campaign, tracking click-through and credential-submission rates and delivering security awareness recommendations to leadership.

Automotive Security Intern

Bosch

Jul 2023 - Jul 2024

Analyzed AUTOSAR SecOC protocol for ECU communication design weaknesses, identifying spoofing/replay attack vectors and proposing mitigation's aligned with ISO/SAE 21434.