Saney A.

🌟🌟🌟 I uncovered 30+ critical vulnerabilities in a SaaS platform's API layer - saving them from a breach that could have exposed 50,000+ user records. I've run full-scope red team engagements for product companies, simulating real-world attacks across web, mobile, and network layers before bad actors could. I've also built CI/CD-integrated automation testing pipelines that cut QA cycles by 60% for engineering teams shipping fast. OFFENSIVE SECURITY & PENETRATION TESTING • Web Application & API Pentesting (OWASP Top 10, IDOR, SQLi, XSS, Auth Bypass) • Network Penetration Testing & Infrastructure Vulnerability Assessments • Mobile App Security Testing for iOS & Android (OWASP MASVS) • Red Team Engagements including phishing simulations and adversary emulation • Multi-tenant isolation testing for SaaS platforms handling PII and financial data I don't just run scanners and export PDFs. Every engagement includes manual exploitation, proof-of-concept documentation, and a remediation roadmap your dev team can actually act on. QA, AUTOMATION TESTING & CI/CD • Test Automation Frameworks using Selenium, REST Assured, and Postman • API Testing, Regression Testing, and Performance Testing • CI/CD pipeline integration (GitHub Actions, Jenkins, Docker) • End-to-end QA coverage for web platforms, dashboards, and mobile apps I've helped engineering teams go from manual, error-prone testing to fully automated pipelines- reducing release risk and shipping with confidence. DEVOPS & SECURE INFRASTRUCTURE • Docker, Kubernetes, and AWS cloud environments • Infrastructure as Code with Terraform • Cloud Security assessments and hardening • Linux system administration, monitoring, and logging I build and secure infrastructure - not just test it. That dual perspective means I catch vulnerabilities that pure-play pentesters or pure-play DevOps engineers miss. FULL STACK DEVELOPMENT • Frontend: React, Next.js • Backend: Python, Node.js, Django, Flask • REST API development with secure coding practices baked in Building secure software from the ground up is faster and cheaper than retrofitting security later. I bring both mindsets to every project. WHO I WORK WITH SaaS founders and CTOs who need security validation before launch, SMBs handling sensitive data who need a real assessment (not a checkbox audit), product teams shipping mobile and web apps, and engineering teams that want security and QA working together instead of against each other. View my portfolio below or send me a message to discuss your project - I respond fast and I ask the right questions.