Anurag Tiwari

About Anurag Tiwari

A results-driven cybersecurity professional with over two years of experience specializing in web application and API security. I specialize in going beyond automated scans to find critical business logic and API vulnerabilities that other tools miss. Using my expertise with Burp Suite Professional, Nessus, and Qualys WAS, I\'ve consistently identified and reported security flaws that could have led to significant data exposure. My biggest wins include working directly with developers to ensure swift remediation, turning a list of vulnerabilities into a strengthened, resilient application.What sets me apart is my ability to translate technical risk into clear business impact. I excel at creating detailed reports and presenting findings to both technical and non-technical leaders, securing buy-in for security initiatives and fostering a culture of \"secure by design.\" My passion for this field drives me to continually expand my skills; I’m actively learning cloud security, manual code review, AI security and red teaming in my free time to stay ahead of the curve.I am driven by the challenge of outthinking modern threats and protecting digital assets. I am seeking a team where I can apply my hands-on expertise and proactive problem-solving to build more resilient and secure systems.

Experience

1. Application Security Analyst

   Deloitte

   Aug 2025 — Present · Hyderabad, IN

   Identified and prioritized critical vulnerabilities in web applications and APIs by performing manual penetration tests and leveraging automated DAST and SAST tools, including Burp Suite Professional, Qualys WAS, Web Inspect and Nessus.Contributed to a more secure SDLC by collaborating with developers to remediate security flaws, reducing the application\'s attack surface.Authored and presented detailed, risk-assessed reports to technical teams and leadership, translating complex security findings into clear business risks and driving remediation efforts.Conducted targeted security assessments to uncover complex business logic flaws and authentication bypasses that automated tools failed to detect.

Education

• Jawahar Navodaya Vidyalaya,Basdei, Surajpur

  High School Diploma, High School/Secondary Diplomas and Certificates

• Indian Institute of Information Technology Bhagalpur

  Bachelor of Technology - BTech, Electrical, Electronics and Communications Engineering