Shubra Das

Application Security Engineer

PSEI Global - Prince Hrram Housing Ltd. • Full time

Nov 2025 - Present • 6 mos

Designed, developed, and secured Flutter Applications and Django-based web applications following secure SDLC principles. Implemented authentication and authorization mechanisms using JWT, OAuth, and rolebased access control (RBAC). Conducted application security testing, including input validation, authentication checks, and vulnerability assessment for OWASP Top 10 risks. Integrated secure APIs and enforced data protection best practices such as encryption in transit and secure storage. Performed code reviews to identify security flaws, logic errors, and misconfigurations. Implemented security controls to mitigate SQL Injections, XSS, CSRF, and insecure deserialization vulnerabilities. Collaborated with development teams to ensure secure deployment and configuration. Assisted in security documentation, risk assessment, and remediation planning.

Cyber Security Analyst

Fiverr International Ltd. • Freelance

Jun 2022 - Present • 3 yrs 11 mos

Complete 20+ projects on cybersecurity, threat modeling, malware analysis and OSINT Investigation with 5 star reviews from global clients. Delivered vulnerability assessment and penetration testing, threat analysis, threat modeling, risk assessment services to global clients. Analyze malware for WordPress and server environment to protect from malware attacks. Implementing security policies to secure the WordPress Environments. Conducted OSINT investigations on targets in the US. Developed backend features using Python and Django for Web Applications. Documenting findings, remediation strategies, and consulting to enhance the overall security.

Cyber Security Analyst Intern

Arena Web Security

Sep 2022 - Oct 2022 • 1 mo

Performed vulnerability scans and penetration testing on Web-based threats. Managed malware analysis to detect malicious entities on WordPress platforms. Conducted open-source intelligence investigations and threat analysis. Collaborated with the security team to document finding and remediation strategies.