Hi, I'm Rounak and I'm a Penetration Tester

03 / Experience

Where I've operated.

1. 

   Associate Consultant

   KPMG India

   Apr 2026 - Present

   • Web · API · Mobile · Infra VAPT
   • Active Directory
   • Red Team
   • AI Tooling

   • Performed Active Directory configuration reviews (PingCastle, Purple Knight) and supported authenticated AD penetration testing (BloodHound, Impacket, NetExec), identifying misconfigurations, stale accounts, excessive delegation, weak Kerberos encryption and Kerberoastable service accounts.
   • Supported a Red Team engagement, performing external reconnaissance through OSINT, subdomain enumeration and attack-surface mapping.
   • Performed black-box security testing on Android and iOS applications per OWASP MASVS and NPCI guidelines, covering certificate pinning, insecure data storage, traffic interception and IPC exposure.
   • Contributed to an internal AI-powered penetration testing tool, reviewing model-generated findings and flagging false positives and negatives to improve accuracy.
2. 

   Associate

   PwC India

   Sep 2023 - Jul 2025

   • Web · API · Mobile · Infra VAPT
   • Red Team
   • CERT-IN
   • Secure Code Review

   • Conducted VAPT for 100+ applications (Web, API, Mobile) and 5000+ IPs; triaged and reported 400+ high/critical findings and delivered prioritized remediation guidance.
   • Key contributor to CERT-IN Empanelment VAPT, achieving 90%+ vulnerability coverage across enterprise infrastructure.
   • Executed full-scale Red Team operations, improving client detection/response by 20-30%.
   • Conducted assessments of SaaS / cloud integrations (SOC2 readiness, IAM validation, config auditing).
   • Authored 100+ detailed security reports including PoCs, exploit chains, lateral movement paths and prioritized remediation.
   • Performed secure code review for 200k+ LOC using Fortify / SonarQube, identifying logic flaws.
   • Automated enumeration and reporting processes, reducing manual testing effort by 25%.
   • Received 2 “Above and Beyond” Awards for exceptional NAC Bypass and Red Teaming contributions.