tanveersingh

O mnie

Security engineer specialising in offensive and application security.

I work inside an enterprise AppSec programme, running vulnerability management across web apps, APIs, cloud and infrastructure: SAST and SCA via Checkmarx One, DAST via Invicti, infrastructure scanning via Tenable, with remediation tracked to closure rather than handed over as a PDF.

What I do for clients:

- Penetration testing for web apps and APIs. Manual testing with proof of concept, not scanner output - Cloudflare WAF, Zero Trust and bot protection configuration - Malware removal and recovery for compromised sites and servers - Server and website hardening, security audits, cloud assessments - Incident response

Recent work includes a seven domain audit analysing over 98,000 firewall events, which surfaced two active threat actors the client was unaware of.

Certifications: HTB CJCA and HTB COAE. Working toward HTB CPTS.

Every finding ships with a CVSS score, reproduction steps and a fix your developers can act on.