Medha Bg

About Medha Bg

Cybersecurity Enthusiast | CEH | SC-200 | Penetration Tester with 3+ years of experience at AccentureI started my career building and deploying systems as a DevOps Engineer managing pipelines, automating deployments and keeping applications running. But the more I worked with applications, the more one question stayed with me:How secure are the systems we build? That curiosity led me into cybersecurity.Today, I work as a Penetration Tester at Accenture, bringing that builder\'s mindset into offensive security. I test Web Applications, APIs, Networks and Mobile identifying vulnerabilities like Broken Access control, SQL Injection, XSS, IDOR, CSRF, and Authentication Bypass before attackers ever get the chance. Understanding how systems are built makes me sharper at finding where they break. I thrive in collaborative environments and always eager to learn, adapt, and implement methodologies to help organizations improve their security posture.What I do:Web App,API, Network and Mobile Penetration Testing (OWASP Top 10).False Positive Analysis from SAST/DAST tools.Proof-of-Concept development & risk-based reporting.Re-testing & Security Sign-off for Production Deployments.Current focus:Exploring AI Security & LLM Pentesting, including prompt injection and data leakage risks because modern applications are evolving, and so are the threats.I hold a CEH from EC-Council and Microsoft SC-200 and I\'m currently pursuing my Master\'s in Cybersecurity.Always learning. Always testing. Always one step ahead.

Experience

1. Security Delivery Analyst

   Accenture in India

   Aug 2023 — Present · Bengaluru, IN

   Hunt vulnerabilities across Web Apps, APIs, Networks, Mobile before attackers do, focus on manual and Automated testing aligned to OWASP Top 10.• Uncovered critical flaws: SQL Injection, XSS, IDOR, CSRF, Auth Bypass, Business Logic with PoC evidence for every finding.• Cut through scanner noise false positive analysis on SAST/DAST outputs with validation & evidence-based conclusions.• Developed Proof of Concepts (PoC) and simulated real-world attack scenarios.Exposure to LLM security testing (prompt injection, data leakage risks).• Bridge the gap between security & development team by providing remediation guidance, secure coding sessions & fix validation.

Education

• University of Mysore

  Bachelor's degree, Computer Science

• REVA Academy for Corporate Excellence - RACE, REVA University

  MS in Cyber Security, Cyber Security