Kajol Mogra

About Kajol Mogra

As a Security Consultant with 5+ years of hands-on experience, I specialize in penetration testing, vulnerability assessment, secure source-code review, cloud security, and cyber forensics. My expertise extends to GenAI-based application security testing, where I assess and exploit vulnerabilities in AI-driven systems and LLM-integrated platforms to ensure ethical and responsible deployment of generative AI technologies.I’ve partnered with clients across stock exchanges, manufacturing, and electronics sectors, conducting comprehensive security assessments aligned with OWASP Top 10, NIST, and ISO 27001 frameworks. My goal is to help organizations identify risks early, strengthen defenses, and embed a proactive security culture.I’m certified in CEH (Certified Ethical Hacker), CCSK (Certificate of Cloud Security Knowledge), and EJPT (eLearnSecurity Junior Penetration Tester) — combining deep technical skills with business-level communication to translate complex findings into actionable insights.Core Skills:Penetration Testing | Vulnerability Assessment | GenAI Application Penetration Testing | Secure Code Review | Web & Mobile App Security | Cloud Security (AWS, Azure)| Cyber Forensics | Incident Response | Threat Modeling | SIEM | Secure SDLC#open to opportunities in Application Security, Penetration Testing, or Cybersecurity Consulting, especially roles exploring AI security testing and advanced AppSec research.

Experience

1. Security Consultant

   NTT DATA, Inc.

   Sep 2023 — Present

   Led black box penetration testing for over 100+ web, API, and network applications at a leading stock exchange, driving major improvements in overall security posture.Directed multi-layer security assessments for manufacturing clients, covering network, Wi-Fi, and configuration reviews with measurable risk reduction.Conducted source code reviews for multinational electronics firms, identifying and resolving critical and high-severity vulnerabilities.Performed GenAI-based application security testing, assessing vulnerabilities in AI-integrated systems and ensuring secure model deployment.Supported CERT-In implementation, strengthening compliance and incident response capabilities.Partnered with leadership on business development and cybersecurity service expansion initiatives.Key Domains: Penetration Testing | GenAI Application Security | Vulnerability Assessment | CERT-In ComplianceTools: Burp Suite, Nessus, Qualys, Nmap, Wireshark, Metasploit