Gurpreet S.

Security Engineer | Penetration Testing | Bot Mitigation | Incident Response | Application Security I work as a Senior Security Engineer where I deal with large scale security challenges daily, from bot networks and web abuse to vulnerability assessments and incident response on platforms serving millions of users. My background covers the full security lifecycle: Offensive security Vulnerability assessment and penetration testing across web applications, identifying weaknesses before attackers do. Experience with VAPT engagements covering OWASP Top 10, authentication flaws, injection vulnerabilities, and business logic issues. Defensive security Bot mitigation, web abuse detection, WAF configuration, rate limiting, and traffic analysis. I have dealt with everything from credential stuffing and account takeover attempts to large scale scraping operations and store cloning attacks. Risk and compliance Threat modeling, architecture risk assessments, and security reviews helping businesses understand their attack surface and prioritise what to fix first. Incident response Investigating active breaches, tracing attack vectors, containing damage, and hardening systems post incident so it does not happen again. Some specific problems I help businesses solve: Unauthorised account access and breach investigations, bot traffic and automated scraping, fraudulent analytics inflation, store cloning and product theft, credential stuffing, checkout abuse, WAF setup and tuning, and ongoing security monitoring. My approach is practical not theoretical. I start by understanding exactly what is happening before recommending anything. Whether that is analysing traffic patterns, reviewing access logs, or running a proper vulnerability assessment the goal is always targeted solutions that fix the real problem. New to Upwork, not new to security.