Afsana Nadaf

Accenture

Mumbai, Maharashtra, India

Since March 18, 2026

Skills

Automation TestingPostmanTeam LeadershipRest ApiReport WritingCommunicationSecurity AnalystBurp Suite, NMAP, RASP, Kali Linux, OWASP Top Ten, CVSS Scoring, MITRE ATT&CK

Experience

Accenture

Application Security Analyst (VAPT | Web & API Security)

January 1, 2022 – Present

Mumbai, India

Key Strengths

Extensive experience in end-to-end manual and automated Web & API VAPT for enterprise applications.
Deep understanding and practical application of OWASP Top 10 vulnerabilities and advanced API security concepts (OAuth2, JWT, BOLA, mass assignment, business logic abuse).
Proficiency with industry-standard security tools including Burp Suite, OWASP ZAP, Nmap, Postman, and Fortify for DAST and SAST.
Strong capabilities in manual security code reviews and false positive validation, enhancing report accuracy and developer trust.
Demonstrated ability in vulnerability assessment reporting, including CVSS scoring, risk prioritization, PoC creation, and remediation guidance.
Experience participating in security architecture reviews, identifying design-level risks, and providing security observations.
Proven ability to coordinate with development and QA teams for vulnerability remediation and secure releases, indicating strong cross-functional collaboration.
Mentorship experience for junior analysts, contributing to team skill development and quality assurance.
The candidate's experience aligns well with the technical requirements of a Senior Application Security Analyst role, particularly in Web and API security.

Cultural & Operational Fit

Cultural Fit Analysis

Based on the candidate's self-reported soft skills, particularly 'cross-team collaboration' and 'mentoring junior analysts,' there is an indication of a positive cultural fit. The experience of coordinating with development and QA teams also suggests an ability to work effectively within a team-oriented environment. However, the psychometric test score is 0, indicating that this area has not been objectively assessed, and conclusions are drawn solely from self-reported information.

Soft Skills & Operational Fit

AI is analyzing your overall score…

Identifying your key strengths…

Evaluating your skill match against the job requirements…

Assessing your cultural and operational fit

Key Strengths

Extensive experience in end-to-end manual and automated Web & API VAPT for enterprise applications.
Deep understanding and practical application of OWASP Top 10 vulnerabilities and advanced API security concepts (OAuth2, JWT, BOLA, mass assignment, business logic abuse).
Proficiency with industry-standard security tools including Burp Suite, OWASP ZAP, Nmap, Postman, and Fortify for DAST and SAST.
Strong capabilities in manual security code reviews and false positive validation, enhancing report accuracy and developer trust.
Demonstrated ability in vulnerability assessment reporting, including CVSS scoring, risk prioritization, PoC creation, and remediation guidance.
Experience participating in security architecture reviews, identifying design-level risks, and providing security observations.
Proven ability to coordinate with development and QA teams for vulnerability remediation and secure releases, indicating strong cross-functional collaboration.
Mentorship experience for junior analysts, contributing to team skill development and quality assurance.
The candidate's experience aligns well with the technical requirements of a Senior Application Security Analyst role, particularly in Web and API security.

Cultural & Operational Fit

Cultural Fit Analysis

Soft Skills & Operational Fit