Varugala Pavan Kumar

About Varugala Pavan Kumar

I’m a Security Researcher with 2+ years of hands-on experience in Application Security…

Experience

1. Security Researcher

   Deloitte

   Nov 2023 — Present · Hyderabad, IN

   At Loginsoft, I work as part of the Application Security team, where I focus on identifying and reducing risks across web applications, open-source components, and infrastructure layers- I perform regular security assessments using both dynamic and static analysis tools to uncover issues in production and pre-production environments- I contribute to supply chain security efforts by writing custom detection rules for tools like Semgrep and conducting Software Composition Analysis (SCA) to flag known CVEs in third-party libraries across JavaScript, Python, and Java ecosystems- I\'ve helped teams fix vulnerabilities early by collaborating directly with developers, integrating security findings into the SDLC, and improving long-term application posture- I’ve also developed threat detection content for Tanium Comply using XML and OVAL, enabling automated checks for misconfigurations across Windows, Linux, macOS, and network devices- My work spans a range of tools including Burp Suite, Nessus, Nmap, SonarQube, Wireshark, and Postman, allowing me to conduct comprehensive penetration tests and risk analysis across layers.