Avijit Saha

About Avijit Saha

As a passionate and results-driven cybersecurity professional, I specialize in safeguarding critical infrastructure and sensitive data. With hands-on experience and a strong foundation in vulnerability management, threat intelligence, and risk mitigation, I bring a proven ability to deliver measurable outcomes in high-stakes environments.During my tenure as a Senior System Engineer at Infosys Limited, I’ve led key initiatives across: Vulnerability Management – Drove the implementation of comprehensive vulnerability scanning and penetration testing programs, providing actionable insights to reduce risk. Threat Intelligence – Identified and analyzed emerging threats and vulnerabilities, ensuring adherence to industry standards such as ISO, NIST, and APTA. Risk Assessment & Mitigation – Conducted security reviews of new technologies and existing systems, proactively addressing potential risks before they could impact operations. Security Policy Development – Played a vital role in crafting and rolling out effective security policies and frameworks aligned with organizational goals.I’m always eager to connect with fellow professionals and explore opportunities to strengthen cybersecurity strategies. Let’s connect!

Experience

1. Tecnology Analyst

   Infosys

   Apr 2025 — Present · Pune, IN

   Product Security TestingExecuted Application, Network, and Mobile Penetration Testing using Burp Suite, Metasploit, Kali Linux, ZAP, and Wireshark. Applied OWASP WSTG and PTES methodologies for vulnerability triage, business logic testing, and impactful proof-of-concept demonstrations.🤖 AI Integration in Security WorkflowsIntegrated AI-driven tools for vulnerability prioritization, code analysis, and incident response automation. Enhanced decision-making in threat modeling, network testing, and penetration workflows using Python and PowerShell. Secure Code ReviewPerformed manual and automated code audits using Checkmarx, Fortify, and OWASP standards. Specialized in secure code review for Java (Spring), Python, and JavaScript, focusing on encryption, IAM, and access controls within agile SDLCs. Vulnerability Management & CommunicationIdentified, exploited, and reported vulnerabilities with comprehensive technical documentation, remediation plans, and stakeholder presentations. Supported defect closure and developer enablement through shift-left practices and vulnerability management processes. Expertise in Application Security & TestingExtensive knowledge of OWASP Top 10, DAST/SAST, test case creation, and security validation across hybrid environments (Web, Thick Client, APIs, Mobile). Conducted network, OS, and database testing to ensure secure coding across architectures.

Education

• Swami Vivekananda Institute of Management and Computer Science 250

  Diploma of Education, Computer Science

• Future Institute Of Engineering and Management

  Bachelor of Technology - BTech, Computer Engineering