Anuj Pande
Security Engineer
Pune
Summary
Dedicated and sincere professional committed to achieving success in all tasks assigned, aiming to reach the pinnacle of success and demonstrate value to the organization through potential and qualifications.
Overview
4
4
years of professional experience
8
8
years of post-secondary education
3
3
Certifications
2
2
Languages
Work History
Security Engineer (Penetration Tester)
Cognizant
Pune
01.2025 - Current
- Vulnerability Assessment and Penetration Testing of Web Applications, APIs and Network for the leading bank and E-commerce websites and Stock Exchange.
- Communicating with client for discussion of findings and mitigations.
- Follow up and Assist clients in mitigating vulnerabilities.
- API security assessment for REST and SOAP API.
- Network Security assessment (VA and VAPT)
- Use OWASP Risk Rating methodology to assign severity.
- Prepare detailed POCs with fix recommendations using company's standard reporting tool.
- Retesting of reported vulnerability which have been fixed and preparing report.
- Executed number of Web Application Penetration testing projects mainly from industries like Banking, finance & e-commerce, Stock exchange etc.
- Performed Red Team assessment with team members on different application.
- Performed Penetration testing on the mainframe Applications
- Evaluated emerging technologies for their potential impact on organizational security posture, recommending appropriate solutions as needed.
- Implemented robust access controls for sensitive data repositories, reducing the risk of unauthorized access and data breaches.
- Provided training programs for employees on cybersecurity best practices, increasing awareness and fostering a proactive security culture within the organization.
- Designed and deployed secure network infrastructure configurations, minimizing potential attack surfaces and preventing unauthorized access attempts.
- Conducted regular penetration testing to identify vulnerabilities and address them proactively, strengthening system defenses.
- Worked with teams to develop company-wide information assurance, security standards and procedures.
- Conducted security audits to identify vulnerabilities.
Security Engineer (Penetration Tester)
BDO India
Mumbai
05.2023 - 01.2025
- Vulnerability Assessment and Penetration Testing of Web Applications, APIs and Network for the leading bank and E-commerce websites and Stock Exchange.
Communicating with client for discussion of findings and mitigations.
Follow up and Assist clients in mitigating vulnerabilities.
API security assessment for REST and SOAP API.
Network Security assessment (VA and VAPT)
Use OWASP Risk Rating methodology to assign severity.
Prepare detailed POCs with fix recommendations using company's standard reporting tool.
Retesting of reported vulnerability which have been fixed and preparing report.
Executed number of Web Application Penetration testing projects mainly from industries like Banking, finance & e-commerce, Stock exchange etc.
Performed Red Team assessment with team members on different application.
Performed Penetration testing on the mainframe Applications
Evaluated emerging technologies for their potential impact on organizational security posture, recommending appropriate solutions as needed.
Implemented robust access controls for sensitive data repositories, reducing the risk of unauthorized access and data breaches.
Provided training programs for employees on cybersecurity best practices, increasing awareness and fostering a proactive security culture within the organization.
Designed and deployed secure network infrastructure configurations, minimizing potential attack surfaces and preventing unauthorized access attempts.
Conducted regular penetration testing to identify vulnerabilities and address them proactively, strengthening system defenses.
Worked with teams to develop company-wide information assurance, security standards and procedures.
Conducted security audits to identify vulnerabilities. - Contributed to business continuity planning efforts by assessing potential risks to critical systems and implementing backup strategies that ensured minimal downtime during disaster recovery scenarios.
- Implemented robust access controls for sensitive data repositories, reducing the risk of unauthorized access and data breaches.
- Provided training programs for employees on cybersecurity best practices, increasing awareness and fostering a proactive security culture within the organization.
- Conducted regular penetration testing to identify vulnerabilities and address them proactively, strengthening system defenses.
Security Engineer (Penetration Tester)
ATOS India
Bangalore
10.2021 - 05.2023
- Vulnerability Assessment and Penetration Testing of Web Applications, APIs for the leading bank and E-commerce websites.
- Communicating with client for discussion of findings and mitigations.
- Follow up and Assist clients in mitigating vulnerabilities.
- API security assessment for REST and SOAP API.
- Use OWASP Risk Rating methodology to assign severity.
- Prepare detailed POCs with fix recommendations using company's standard reporting tool.
- Retesting of reported vulnerability which have been fixed and preparing report.
- Executed number of Web Application Penetration testing projects mainly from industries like Banking, finance & e-commerce etc.
- Implemented robust access controls for sensitive data repositories, reducing the risk of unauthorized access and data breaches.
- Conducted regular penetration testing to identify vulnerabilities and address them proactively, strengthening system defenses.
Education
B.Tech. - Comp
GGCT Jabalpur
Jabalpur 01.2017 - 01.2021
H.S.S.C - Mathematics
BSPS Chhindwara
Chhindwara 01.2015 - 01.2017
H.S.C. -
K.V. Chhindwara
Chhindwara 01.2013 - 01.2015
Skills
- Penetration Testing
- OWASP Top 10
- Burp Suite
- Nmap
- Rubeus
- Dir Buster
- Go Buster
- Responder
- SQL Map
- Mimi Katz
Evil-winrm
Impacket
- Ligolo-ng
Winpeas
- Linpeas
Ethical hacking techniques
Vulnerability assessment
Certification
Offensive Security Certified Professional (OSCP), Majorly focus on Attacking and Defending Active directory, it gives the basic idea about how to interact and attack the Active directory.
Extra-curricular Activities
Participated in CTFS held inside the college. Worked as a core committee member in college Fest. Participated in Different Bug bounty Programs. Automated and Manual Penetration Testing of Web Applications, API's, Network, Active Directory. Participated and won prizes in various activities in college and school.
Personal Information
Date of Birth: 04/21/99
Accomplishments
I have successfully completed my OSCP (Offensive Security Certified Professional) Certification offered by OffSec for Penetration Testing and Red Teaming.
I have successfully completed the CRTP (Certified Red Team Professional) Certification offered by Altered Security, which primarily focuses on attacking and defending Active Directory. This certification provides fundamental knowledge on interacting with and attacking Active Directory.
I have successfully completed the CRTO (Certified Red Team Operator) Certification, which specializes in adversary simulation and Active Directory exploitation techniques, equipping me with practical skills in red teaming engagements.
hobbies
- Traveling – Passionate about exploring diverse cultures and environments; enhances adaptability and global perspective.
- Gaming – Engaged in strategic and cooperative gameplay; sharpens problem-solving, decision-making, and teamwork skills.
Timeline
Security Engineer (Penetration Tester)
Cognizant
01.2025 - Current
Security Engineer (Penetration Tester)
BDO India
05.2023 - 01.2025
Security Engineer (Penetration Tester)
ATOS India
10.2021 - 05.2023
B.Tech. - Comp
GGCT Jabalpur
01.2017 - 01.2021
H.S.S.C - Mathematics
BSPS Chhindwara
01.2015 - 01.2017
H.S.C. -
K.V. Chhindwara
01.2013 - 01.2015
Similar Profiles
Sujit Veera Venkata SeelaSujit Veera Venkata Seela
Senior Associate - (Projects) at CognizantSenior Associate - (Projects) at Cognizant
Pooja BhargavaPooja Bhargava
Sr Agilist at CognizantSr Agilist at Cognizant
Helen GilbertHelen Gilbert
Delivery Manager – PLM Teamcenter at CognizantDelivery Manager – PLM Teamcenter at Cognizant
ANSHU KANT SINGHANSHU KANT SINGH
Consultant at Infosys LimitedConsultant at Infosys Limited
Prajakta MorePrajakta More
Software Engineer at Tata Consultancy ServicesSoftware Engineer at Tata Consultancy Services