Application Security Web

Meeninti Anusha

Hyderabad, India +91-814******* ********.**********@*****.***

Career Objective

Detail-oriented Web Application Security Tester with 1 year 1 month of combined internship and full- time experience in identifying and remediating vulnerabilities in enterprise-grade web applications. Skilled in penetration testing, vulnerability assessment, and reporting. Seeking to contribute to securing applications through ethical hacking and proactive security testing. Professional Summary

• 1 year of combined experience (4 months internship + 9 months full-time) in healthcare web application security testing.

• Hands-on expertise in OWASP Top 10 vulnerabilities: SQL Injection, XSS, CSRF, IDOR, Broken Access Control.

• Proficient in security testing tools: Burp Suite, OWASP ZAP, Nikto, Nmap, Gobuster, Dirsearch, Nuclei, Amass, httpx, sqlmap, subfinder, WhatWeb.

• Delivered vulnerability reports with CVSS scoring, PoCs, and remediation guidance. Core Skills

• Web Application Security Testing

• OWASP Top 10 Vulnerabilities (SQLi, XSS, CSRF, IDOR, Broken Access Control)

• Security Testing Tools: Burp Suite Pro, OWASP ZAP, DevTools

• Recon & Scanning: Nmap, Nikto, Gobuster, Dirsearch, Nuclei, Amass

• API & Business Logic Testing

• Vulnerability Reporting & CVSS Scoring

• Secure SDLC & Threat Modeling

Professional Experience

Application Security Analyst Penetration Tester

Atya Technologies, Hyderabad February 2025 – September 2025 (Full-Time)

• Conducted penetration testing of healthcare web applications, identifying security vulnerabilities and recommending remediation.

• Discovered SQL Injection, XSS, CSRF, IDOR, Broken Access Control, Sensitive Data exposure and insecure session management issues.

• Performed reconnaissance, input validation testing, and configuration checks using Burp Suite, OWASP ZAP, and browser DevTools.

• Delivered detailed vulnerability reports with CVSS scoring, PoCs, and remediation guidance.

• Collaborated with developers to verify fixes and validate remediation. Internship Web Application Security Tester

Atya Technologies, Hyderabad September 2024 –January 2025

• Assisted in penetration testing of web applications.

• Gained hands-on experience with security tools: Burp Suite community and pro, OWASP ZAP, Nikto, Nmap, Gobuster, Dirsearch, and sqlmap.

• Practiced on PortSwigger Labs, DVWA, and OWASP Juice Shop to strengthen testing skills and methodology.

• Supported the team in vulnerability reporting and remediation documentation. Certifications & Labs

• PortSwigger Web Security Academy (OWASP Labs)

• Practical VAPT training on simulated enterprise applications Education

B.Sc. in Biotechnology Osmania University, Hyderabad 2014 – 2017 Previous Background (Non-IT Experience)

Mapping Analyst – GIS Projects

• Tech Mahindra (Aug 2018 – Aug 2019)

• Wipro Ltd. (Oct 2019 – June 2022)

Key Highlights:

• Analyzed and visualized spatial data for GIS projects.

• Developed attention to detail and analytical thinking skills transferable to cybersecurity.

Contact this candidate