
Sajib Sutradhar
OSCP, CEH, eWPT, 5x CVE
Skills

See my services


Portfolio
Work experience
Web Application and API penetration Tester
Creative IT Institute
Jan 2021 - Present • 5 yrs 10 mos
Performed security assessments on web applications and REST APIs to identify vulnerabilities and security weaknesses. Conducted manual and automated penetration testing using industry-standard tools and methodologies. Identified and reported vulnerabilities such as Cross-Site Scripting (XSS), Insecure Direct Object Reference (IDOR), SQL Injection, and authentication issues. Utilized tools like Burp Suite Professional, Acunetix Invicti, Nessus Professional, Nuclei, and other reconnaissance tools to discover hidden endpoints and security flaws. Analyzed HTTP requests and responses, tested API endpoints, and validated input handling mechanisms. Prepared detailed vulnerability reports including proof-of-concept, risk impact, and remediation recommendations to improve application security. Collaborated with development teams to help fix vulnerabilities and strengthen overall security posture.