Gurram Jagan Bhasker
Professional Summary
Application Security Engineer with 0 years of experience performing hands-on web and API security assessments, internships, and independent AI security research. Skilled in web and API testing using Burp Suite, OWASP ZAP and Postman with practical application of OWASP Top 10 and OWASP API Security Top 10 during engagements. Experienced in LLM/GenAI security research aligned to OWASP LLM Top 10, including prompt injection, insecure-output handling, RAG pipeline hardening, and agentic-AI threat analysis. Proficient in Java and Python for building runtime defenses and analysis tools and comfortable automating PoCs and test cases in Bash. Delivered VAPT reports with CVSS scoring, reproducible PoCs and remediation guidance to development teams. Mapped findings to MITRE ATT&CK and recommended Secure SDLC controls to reduce recurring vulnerabilities. Seeking entry-level roles in Application Security, API Security or AI Security to apply hands-on testing, threat modeling and secure-by-design development.
Technical Skills
Work Experience
- Performed manual black-box penetration tests on web and API applications using Burp Suite and Postman to enumerate injection, authentication, and authorization vectors.
- Identified and validated 15 vulnerabilities including SQL Injection, XSS, Broken Authentication and BOLA, and assigned CVSS scores to prioritize fixes.
- Tested REST and GraphQL endpoints against OWASP API Security Top 10 patterns to uncover IDOR and authorization bypass issues.
- Delivered professional VAPT reports with step-by-step reproduction, remediation guidance and prioritized risk ratings for development stakeholders.
- Triaged developer-submitted fixes by reproducing issues on Linux evidence hosts and updating Git-tracked reports to confirm remediation.
- Authored post-engagement recommendations to integrate Secure SDLC checks and acceptance tests to prevent recurrence of common API flaws.
- Conducted hands-on security assessments of internal applications using OWASP ZAP and Nmap to identify exposed services and misconfigurations.
- Identified and documented 8 security misconfigurations across internal apps and provided prioritized configuration changes to operations teams.
- Validated SQL Injection, CSRF and session management weaknesses through crafted test cases and targeted scripts to demonstrate exploitability.
- Mapped observed techniques to MITRE ATT&CK to inform threat modeling and remediation prioritization for product teams.
- Created reproducible PoC scripts and diagnostic utilities in Python and Bash to demonstrate exploit paths and support developer fixes.
- Presented findings and remediation steps to engineering teams and maintained an internal tracker to follow remediation progress.
Education
Certifications
Powered by Drivetube · Create your own profile at drivetube.ai
Explore Drivetube
- Drivetube Profile — your free digital resume — at drivetube.ai/in/your-name: one true standard resume with a Hiring Snapshot (visa status, expected salary, notice period, work preference, relocation), an ATS-ready PDF download and a single shareable link. Free forever; interview requests come from verified employers and your contact details stay masked until you accept. Documentation.
- Free Job Board — verified openings crawled ATS-by-ATS from 100,000+ real company career pages across 35 ATS platforms. Shows the true posting date from the source ATS — not when a listing was indexed — and deletes every general listing 3 days after it was actually posted. No ghost jobs, no ad-sponsored listings, no staffing reposts, no account needed. Documentation.
- Job Hunt Program — managed job hunting, a one-time purchase from $199.99. JobScout matches verified roles to your real experience band, Blend AI writes a uniquely tailored resume and cover letter for every application, and the Autofill extension fills the form — or Let Us Apply submits it for you. Documentation.
- Resume Writing Services — human-written, ATS-optimised resumes by senior career writers, from ₹499.99 / $25.99. Available in every country, written to the destination country's own standard — a US resume, UK CV, German Lebenslauf and Indian resume are genuinely different documents. A paid service, separate from the free Drivetube Profile. Documentation.
- Community Membership — from $4.99/month (₹1,999/year in India). Unlocks the gated job-board filters — visa sponsorship, security clearance, workplace and application time — plus Job-Scout AI matching, Resume Report AI, Interview AI prep sheets, Recruiter Outreach AI sent from your own Gmail, Apply or Skip triage, a daily market feed and a $10,000+ library including 23 ATS-validated resume templates. Documentation.
- Drivetube Hire — for employers — hiring with no job postings and no applications. Paste your real job description and AI matches it against candidates' true standard resumes, returning ranked candidates with a match %, matched and missing skills and written reasoning. Free tier included; employers pay, candidates never do. Documentation.
Full product documentation — every product explained, with feature-by-feature comparisons against the job boards, AI apply tools, resume services and hiring platforms people actually use.
The job board covers the United States, India, United Kingdom, Canada, Europe and Australia, and Resume Writing Services are available in every country.