THALARI THIRUPATHI
HYDERABAD, INDIA · AVAILABLE FOR ENGAGEMENTS

Breaking systems
so attackers can't.

Penetration tester and VAPT specialist working across web, API, mobile, and network surfaces. Formally recognized by CERT-IN, Panasonic, BBC, and Sony for responsible disclosure — and trusted alongside NCIIPC to secure 30+ government applications.

Start an engagement → View LinkedIn
01

Executive Summary

key achievements
Scope
30+

Government applications secured in direct collaboration with NCIIPC.

Recognition
4

Formal acknowledgements from CERT-IN, Panasonic, BBC, and Sony.

Findings class
IDOR / SQLi

Plus authentication-bypass flaws reported across enterprise client apps.

Coverage
Web·API·Mobile·Net

Black, gray, and white box assessments end to end.

02

Professional Experience

2025 — present
JAN 2026 — PRESENT● active
Cybersecurity Associate (Penetration Tester)
Alliance Pro IT
  • Run black box, gray box, and white box penetration tests across web apps, APIs, and mobile platforms against client-defined scopes.
  • Perform threat modeling and architecture analysis to surface attack vectors and business logic flaws pre- and post-production.
  • Discovered and reported critical IDOR, SQL injection, and authentication-bypass vulnerabilities across enterprise client applications.
  • Author detailed vulnerability reports — risk ratings, attack scenarios, PoCs, and prioritized remediation — for technical and executive audiences.
  • Partner directly with development and infrastructure teams through retesting and validation to confirm fixes land.
MAY 2025 — OCT 2025
Security Analyst Intern
Andhra Pradesh Technology Services (APTS)
  • Performed VAPT on 40+ websites and APIs using Burp Suite, Postman, Nmap, and Nessus, validated against OWASP Top 10.
  • Ran 5+ network audits analyzing device configurations, access controls, and exposure across multiple environments.
  • Collaborated with NCIIPC to secure 30+ government-facing applications — a measurable lift to public-sector security posture.
  • Documented findings with risk severity, proof of concept, and actionable remediation guidance for dev and network teams.
03

Technical Skill Matrix

tools & frameworks

Penetration Testing

Web ApplicationAPIMobile (Android/iOS) NetworkThick Client

Security Tools

Burp SuiteMetasploitNmap NessusPostmanWireshark

Methodologies

OWASP Top 10MITRE ATT&CK Black/Gray/White BoxThreat Modeling

Vulnerability Management

Risk AssessmentCVSS Scoring PoC DocumentationRetesting & Validation

Networking & Routing

OSI / TCP-IPSubnettingOSPF EIGRPBGPVLANs / STP Cisco / Juniper

Scripting & Systems

Python (recon automation)Bash Linux (Debian/Ubuntu)Windows
04

Certifications

verified credentials
✓
eWPT — Web App Penetration Tester
INE Security
✓
CRTA — Certified Red Team Analyst
Cyber Warfare Labs
✓
API Security Fundamentals
API-SEC University
✓
CTEM: CyberThreya Elite Mastery
CyberThreya Training Institute
✓
Foundations of Cybersecurity
Coursera (Google)
✓
Introduction to Cybersecurity
Cisco Networking Academy / Coursera
✓
Trained & Certified
Tungabadra Networks
…
OSCP — Offensive Security Certified Professional
in progress
05

Engagements & Projects

selected work
NCIIPC Collaboration

Government Application Security Program

  • Assessed and secured 30+ government-facing web and API applications across diverse architecture stacks and compliance requirements.
  • Identified critical authentication and injection vulnerabilities in publicly deployed systems, preventing potential large-scale data breaches.
  • Coordinated disclosure and remediation with application owners, earning formally recognized contributions to national cybersecurity infrastructure.
Alliance Pro IT

Enterprise & Public-Facing App Assessments

  • Delivered end-to-end penetration testing across web, API, and mobile platforms for enterprise clients spanning multiple business domains.
  • Produced CVSS-rated findings reports with PoCs and remediation roadmaps for technical teams and executive stakeholders.
GNS3 Lab

OSPF Real-Time Multi-Area Project

  • Rolled out OSPF routing in an enterprise-grade topology — Backbone (Area 0), Stub, Totally Stubby, and NSSA regions.
  • Validated functionality using LSA Types 1–7, achieving stable convergence and redundancy across all areas.
GNS3 Lab

VLAN & Spanning Tree Protocol Implementation

  • Engineered Layer 2/3 switch topologies with Access, Trunk, and Native port assignments for segmentation.
  • Implemented Inter-VLAN routing and STP/RSTP to prevent loops and improve fault tolerance.
06

Education

B.Tech, Electronics and Communication Engineering

GITAM University, Hyderabad

APR 2021 — MAY 2025GPA 7.9

Intermediate (12th Grade), MPC

Narayana Junior College, Hyderabad

JUN 2019 — MAR 202185%