Ernst & Young LLP

Jaypee University Of Engineering & Technology

Profile URL

https://talent.gravityer.com/tanish-sharma

TANISH SHARMA

Cyber security- VAPT

Cyber security- VAPT with 3+ years in Web & API Penetration Testing

Ernst & Young LLP

Jaypee University Of Engineering & Technology

India

Since April 29, 2026

About

Cyber Security Professional with 3.10 years of hands-on experience in Web Application and API Penetration Testing, Vulnerability Assessment and Application Security. Skilled in identifying complex security flaws, analysing attack vectors, business logic flaws, authentication bypass and API security vulnerabilities, and ensuring compliance with OWASP and PCI-DSS standards. Proficient with tools such as Burp Suite, OWASP ZAP, Postman, Nessus and Kali Linux, with a strong ability to deliver clear reports, collaborate with developers, and strengthen overall application security posture.

Top Skills

Burp suitePostmanNmap

Skills

Burp suitePostmanNmapQualysServicenow

Education

Jaypee University Of Engineering & Technology

Bachelor of Technology · Computer Science Engineering

August 1, 2019 – June 30, 2022

Rajiv Gandhi Proudyogika

Diploma · Computer Science Engineering

August 1, 2016 – June 30, 2019

Experience

Ernst & Young LLP

Associate Consultant - Cyber Security (VAPT)

July 1, 2024 – Present

Network Intelligence India Pvt. Ltd

Cyber Security Analyst (API & Application Security)

May 1, 2024 – July 1, 2024

CoreCard India

Security Engineer (VAPT)

July 1, 2022 – April 1, 2024

Certifications

Certified Ethical Hacker (CEH - Master)

Unknown

April 1, 2026 – Present

Certified Red Team Professional (CRTP)

Unknown

April 1, 2026 – Present

EC-Council Certified Incident Handler (ECIH)

EC-Council

April 1, 2026 – Present

Key Strengths

Strong alignment with the 'Cyber security- VAPT' target role, possessing over 3 years of direct experience in penetration testing and vulnerability assessment.
Demonstrated hands-on experience with industry-standard VAPT tools including Burp Suite, OWASP ZAP, Postman, Nessus, Nmap, Kali Linux, and Qualys.
Experience across diverse application types: web, API, thick-client, cloud-hosted, and emerging AI/LLM-based applications.
Familiarity with critical security standards and methodologies such as OWASP Top 10 and PCI-DSS.
Proven ability to identify, exploit, and report a wide range of vulnerabilities, including critical/high severity issues like authentication bypass, SSRF, and SQLi.
Experience in collaborating with development teams for remediation tracking and fix validation.

Cultural & Operational Fit

Cultural Fit Analysis

Insufficient data to assess cultural fit due to a zero score on the psychometric test, which is designed to evaluate aspects relevant to team collaboration and workplace attitude.

Soft Skills & Operational Fit

Insufficient data to assess soft skills and operational fit due to a zero score on the psychometric test, which evaluates logical reasoning, work attitude, stress handling, and team collaboration.

AI is analyzing your overall score…

Identifying your key strengths…

Evaluating your skill match against the job requirements…

Key Strengths

Strong alignment with the 'Cyber security- VAPT' target role, possessing over 3 years of direct experience in penetration testing and vulnerability assessment.
Demonstrated hands-on experience with industry-standard VAPT tools including Burp Suite, OWASP ZAP, Postman, Nessus, Nmap, Kali Linux, and Qualys.
Experience across diverse application types: web, API, thick-client, cloud-hosted, and emerging AI/LLM-based applications.
Familiarity with critical security standards and methodologies such as OWASP Top 10 and PCI-DSS.
Proven ability to identify, exploit, and report a wide range of vulnerabilities, including critical/high severity issues like authentication bypass, SSRF, and SQLi.
Experience in collaborating with development teams for remediation tracking and fix validation.

Cultural & Operational Fit

Cultural Fit Analysis

Insufficient data to assess cultural fit due to a zero score on the psychometric test, which is designed to evaluate aspects relevant to team collaboration and workplace attitude.

Soft Skills & Operational Fit

Insufficient data to assess soft skills and operational fit due to a zero score on the psychometric test, which evaluates logical reasoning, work attitude, stress handling, and team collaboration.