Inamul Ansari

Associate - BAS Cyber Security | VAPT & Application Security Specialist

India

Profile summary

Reliable Associate BAS Cyber Security with 4 years of experience across 2 organizations. Competent in conducting VAPT engagements, vulnerability assessment, and security automation. Committed to delivering accurate security evaluations and effective client communications.

Career highlights

Penetration Testing Scope: Conducted over 70 end-to-end VAPT engagements across web, mobile, API, and network environments for enterprise and financial-sector clients.

Vulnerability Identification: Identified and validated 100+ vulnerabilities aligned with the OWASP Top 10 to strengthen client security postures.

Security Process Automation: Designed and developed a Python-based reporting automation tool that reduced reporting effort by 40 percent, improving turnaround time for client deliverables.

Professional Certifications: Earned multiple credentials including CAPen, CLLMSP, CRTA, and CPTE to validate technical capability in penetration testing and application security.

Key skills

TechnicalMobile Application Security (Android) API Security Testing Security Automation (Python) Injection Flaws Android Dynamic Analysis Postman Programming & Automation: Python (Pandas, OpenPyXL) for Security Scripting & Reporting Automation Kali Linux Linux Servers Python (Pandas, OpenPyXL)
ProfessionalWeb Application Penetration Testing Network Vulnerability Assessment OWASP Top 10 (Web & Mobile) Business Logic Testing Manual Exploitation & PoC Development CVSS v3.1 Risk Scoring CERT-In Compliance Support Technical Reporting & Client Communication OWASP Top 10 Manual Exploitation IDOR Broken Access Control Authentication Bypass OWASP Mobile Top 10 SSL Pinning Bypass Root Detection Bypass Frida Objection MobSF ADB Authorization Bypass Business Logic Exploitation Nmap Nessus Wireshark Metasploit Proof-of-Concept Development Remediation Validation Re-testing CERT-In Regulatory Compliance Burp Suite Windows Technical Security Report Writing PoC Documentation Remediation Guidance Client Engagement

Professional experience

Associate - BAS Cyber SecurityFeb 2023 - Present
BDO India LLP

Manages technical security assessments and compliance initiatives for enterprise and financial clients. Coordinates testing activities across web, mobile, API, and network vectors while maintaining regulatory readiness standards.

  • Conducted 70 end-to-end VAPT engagements across Web, Mobile, API, and Network environments for enterprise and financial-sector clients.
  • Performed Android dynamic security testing using Frida and Objection, including SSL pinning bypass and root detection bypass, to uncover runtime security weaknesses.
  • Executed API security testing including authorization bypass and business logic exploitation to identify gaps beyond standard automated scanning.
  • Performed CVSS v3.1-based risk assessment and managed remediation validation cycles to confirm effective vulnerability closure.
  • Designed and developed a Python-based reporting automation tool that reduced reporting effort by 40 percent, improving turnaround time for client deliverables.
Cyber Security AnalystMar 2022 - Jan 2023
Pristine Infosolutions Pvt. Ltd.

Executed security assessments across web, API, mobile, and network environments for multiple clients. Produced technical security reports containing Proof-of-Concept evidence and remediation instructions for stakeholders.

  • Identified and validated 100 vulnerabilities aligned with OWASP Top 10 to strengthen client security postures.
  • Conducted re-testing and patch validation cycles for enterprise clients to confirm remediation effectiveness.

Projects

Security Reporting Automation Engine

Designed and deployed a custom Python-based automation engine to streamline large-scale data processing and security reporting, migrating manual workflows from Excel to a programmatic environment.

Pandas OpenPyXL Python

Education

Bachelor of Computer ScienceJan 2022 - Jan 2022
Rizvi College of Arts, Science & Commerce

CGPA: 8.01

Certifications

CAPenCertified Application Security Pentester
CLLMSPCertified LLM Security Professional
CRTACertified Red Team Analyst
CPTECertified Penetration Tester Expert
ASFAWS Security Fundamentals
ICIPIntroduction to Critical Infrastructure Protection
CISEHCertified Information Security & Ethical Hacker
DFEDigital Forensics Essentials
NDENetwork Defense Essentials
EHEEthical Hacking Essentials
Microsoft ExcelPower BI
MS-CITMaharashtra State Certificate in Information Technology