Profon3

Security portfolio/Chennai, India

Praveen Kumar

Penetration tester specializing in application security — 100+ vulnerabilities uncovered across 30+ applications.

  • Penetration Tester
  • Application Security Engineer
  • Product Security Analyst
See the work Get in touch

01 — About

Finding the gaps before someone else does.

Name
Praveen Kumar
Profile
Penetration Tester & Application Security

I am Praveen Kumar, a Security Engineer with around 2 years of experience in penetration testing, vulnerability management, and AI-driven security solutions. My expertise spans across securing web applications, mobile applications, cloud, and network infrastructure, with hands-on exposure to frameworks like SOC2, GDPR, and ISO 27001.

In my career, I have successfully conducted comprehensive penetration tests on 30+ applications, uncovering 100+ security vulnerabilities, including critical flaws in access control, sensitive data exposure, and outdated infrastructure. My ability to provide clear, actionable remediation guidance has earned me clients' appreciation and recognition.

Beyond offensive security, I actively contribute to DevSecOps practices such as secure code review, SAST, and cloud security assessments. I also have growing expertise in AI/LLM security, including RAG, prompt injection, and adversarial ML testing—bridging the gap between modern AI adoption and cybersecurity resilience.

I am passionate about helping organizations strengthen their security posture, from threat discovery to remediation guidance, and I thrive in roles that combine technical problem-solving with client collaboration.

C—01

Offensive security

  • Web application pentesting
  • Mobile application pentesting
C—02

Code & application security

  • Source code analysis
  • Application security
C—03

Response & forensics

  • Incident response
  • Digital forensics
C—04

Scripting

  • Bash
  • Python
  • Java

02 — Resume

Track record.

Where I've worked and studied.

Download CV

Experience

2023 — 2025

Software Engineer — Cybersecurity

AVASOFT, Chennai

  • Worked as a Penetration Tester, securing applications, networks, and cloud infrastructure.
  • Conducted comprehensive penetration testing on 30+ web and mobile applications, identifying and reporting over 100 vulnerabilities.
  • Performed reconnaissance and uncovered several critical threats for both clients and the organization.
  • Collaborated with development teams to remediate vulnerabilities and strengthen overall security posture.
  • Led client calls, independently managing technical discussions and providing clear security insights.
  • Received client appreciation for successfully identifying security gaps missed in prior assessments.
  • Assisted the GRC team by providing evidence and support for SOC2 audit requirements.
  • Worked on AI/ML security initiatives to implement secure development practices across AI/ML products.
  • Trained in SAP Security and access controls to meet urgent client requirements.
  • Defined incident response playbooks and established digital forensics methodologies.
  • Outlined requirements for a web application penetration testing and report collaboration tool.
  • Trained and mentored new trainees, ensuring skill development and knowledge transfer.

Education

Aug 2019 — Jun 2023

B.Tech in Information Technology

Meenakshi Sundararajan Engineering College, Chennai · CGPA 8.3

Jun 2018 — Jun 2019

Higher Secondary School

St Vincent Pallotti Matriculation Higher Secondary School, Chennai · GPA 7.84

Jun 2016 — Jun 2017

Secondary School

St Vincent Pallotti Matriculation Higher Secondary School, Chennai · GPA 9.48

03 — Projects

Tools, labs & engagements.

Fig. 01Open source

Alyssia — Android static analysis tool

A bash-based tool designed to help security engineers and researchers analyze Android applications.

  • Bash
  • Android
  • Static analysis
View on GitHub
Fig. 02Lab

PwnDesk AI — a deliberately vulnerable LLM lab

An intentionally vulnerable LLM-powered customer support helpdesk chatbot built with Flask, featuring real-world issues like prompt injection and tool abuse.

  • Flask
  • LLM security
  • Prompt injection
View on GitHub
Fig. 03Client engagement

Web application penetration testing for a storage management client

Comprehensive testing of 3 critical applications, with 20+ bugs found — including critical issues — and appreciation from the client.

Client: name withheld

04 — Writing

Blogs & write-ups.