Sakshi Wadhe

VAPT Analyst

Pune 1+ yrs exp 83 · Excellent

About

Cybersecurity Engineer (VAPT Analyst) with 1.5 years of experience (6-month internship and 1 year of full-time experience) specializing in Black-Box Web Application Penetration Testing and Network Vulnerability Assessment. Experienced in performing security assessments on enterprise web applications and network infrastructure using commercial and open-source security tools. Skilled in identifying OWASP Top 10 vulnerabilities, validating security findings, preparing detailed VAPT reports, and providing risk-based remediation recommendations.

Skills & Expertise (31)

Network vulnerability Assessment Intermediate

7.5/10

1.5

Years Exp

Web Application Penetration Testing Intermediate

7.5/10

1.5

Years Exp

Burp Suite Professional Intermediate

7.0/10

1.5

Years Exp

OWASP Top 10 Intermediate

7.0/10

1.5

Years Exp

vulnerability validation Intermediate

7.0/10

1.5

Years Exp

API Security Testing Intermediate

7.0/10

1.5

Years Exp

Attack Surface Analysis Intermediate

6.5/10

1.5

Years Exp

Nessus Intermediate

6.5/10

1.5

Years Exp

Kali Linux Intermediate

6.5/10

1.5

Years Exp

Risk Assessment Intermediate

6.5/10

1.5

Years Exp

Executive Summaries Remediation validation Vulnerability Prioritization Remediation recommendations Exploit Validation False Positive Validation Network Reconnaissance Security Misconfiguration Analysis TLS SSL DNS HTTPS HTTP IP TCP Postman Nmap CWE CVSS v3.1 SANS Top 25 OWASP API Security Top 10

Work Experience

VAPT Analyst

Aisstant Manager

Jan 2025 - Present

Conducted Black Box Web Application Penetration Testing for 12+ enterprise web applications, identifying vulnerabilities including Authentication Bypass, SQL Injection and Security Misconfigurations. Performed Network Vulnerability Assessments across enterprise IP ranges to identify exposed services, outdated software versions, insecure configurations and missing security patches. Validated vulnerability scan results by eliminating false positives, verifying exploitability and prioritizing findings based on business risk and CVSS scores. Identified and documented vulnerabilities including Authentication Bypass, Injection flaws, Security Misconfigurations, and Access Control issues within approved testing scopes. Prepared detailed VAPT reports including executive summaries, technical findings, proof-of-concept evidence, CVSS risk ratings and remediation recommendations. Performed remediation validation and security retesting to verify vulnerability fixes and update closure status.