Mohak Agarwal

About Mohak Agarwal

Continuously gaining experience in the field of Cyber Security, I am a rigorous and task-driven professional currently working as a Cyber Security Engineer. I have substantial experience in Vulnerability Analysis, Web Application Security, Ethical Hacking, and Penetration Testing.I possess strong knowledge of the OWASP Top 10 vulnerabilities and their remediations, along with Secure Coding Practice Guidelines. I also have a keen interest in Cloud Security and its implementation.Additionally, I am enthusiastic about integrating collaborative technologies such as Cyber Security with Machine Learning (CS-ML) and the Internet of Things (CS-IoT).

Experience

1. Senior Information Security Consultant

   eSec Forte® Technologies

   May 2025 — Present · Gurugram, IN

   Lead black-box testing efforts across 50+ internet-facing URLs, ensuring comprehensive coverage and timely remediation of vulnerabilities. • Maintain and manage a centralized URL inventory, assign testing tasks within the team, and coordinate with application teams for vulnerability resolution. • Continue to manage and optimize SAST and DAST implementations (Fortify, SonarQube, Black Duck), integrating security into the SDLC. • Collaborate with cross-functional teams to ensure secure coding practices and compliance with OWASP, NIST, and ISO 27001 standards. • Conducted penetration testing on web apps, APIs, and GenAI models using Burp Suite, SQLMap, and custom scripts. • Performed unauthenticated testing on 50+ public-facing URLs, strengthening external security posture. • Conducted Application Security Assessments and Vulnerability Assessments for various web applications across domains such as Telecommunication, Education, Energy, Resources, Utilities (ERUI), Banking, and Finance. • Performed Vulnerability Assessment and Penetration Testing (VAPT) of Web and Mobile applications using both automated and manual techniques. • Identified and exploited business logic flaws and technical vulnerabilities based on OWASP Top 10 and NIST Cybersecurity Framework. • Developed and maintained Web Application Security Risk Assessments, Security Assurance Scores, and Vulnerability Trackers. • Integrated automated scan results and code review findings into the Software Development Lifecycle (SDLC) to address vulnerabilities proactively. • Maintained a centralized Vulnerability Tracker and Remediation Portal to improve vulnerability management and team collaboration. • Conducted security assessments of 30+ web applications and identified over 200 vulnerabilities in web/mobile platforms. • Conducted and participated in organization-wide software security training sessions and internal security audits

Education

• GLA University

  Bachelor of Technology - BTech, Computer Science