Security testing & assessment
VAPT / WAPTSASTDASTBASCARTBurp SuiteNessusTenable SCOWASP ZAPFortifyFridaMobSFPhishing simulation
Deputy Manager · Bombay Stock Exchange (BSECL)
Sagar Kuvar
I find the weak points before attackers do, then build the automation that keeps them closed.
Cybersecurity professional with 3+ years across VAPT, SAST, DAST, red teaming and regulatory compliance, backed by a developer's habit of scripting away anything done twice.
- Years in security & analytics
- 3+
- Critical web vulnerabilities reported
- 50+
- Critical mobile findings
- 10+
- Industry certifications
- 7
01 / About
Offence, defence, and the tooling in between.
I currently run vulnerability management and security assessments at Bombay Stock Exchange (BSECL): SEBI‑mandated VAPT/WAPT, NCIIPC and SEBI CSCRF compliance, and the Tenable SC and Nessus platforms that sit underneath it all.
Before that I tested web, API and mobile applications for clients at PwC, delivered analytics and financial due diligence for KPMG Australia, and wrote security tooling at Nomura.
That mix matters. A development background in Python, Flask, Django and CI/CD means I don't stop at the finding. I build the dashboards, scripts and pipelines that get it tracked, owned and closed.
- NowDeputy Manager, BSECL
- FocusVAPT · AppSec · Compliance
- EducationM.Tech CS, IIIT Pune
- Based inNavi Mumbai, Maharashtra
02 / Experience
Where I've worked.
-
Deputy Manager
Bombay Stock Exchange (BSECL)
- Automated VAPT/WAPT dashboards for CISO and CEO visibility, with triggered owner notifications that drive closure.
- Lead compliance‑driven assessments under SEBI‑mandated VAPT/WAPT, NCIIPC and SEBI CSCRF.
- Perform SAST, DAST, VAPT, BAS, CART and compliance assessments alongside vendors.
- Manage Tenable SC and Nessus Manager plugins, upgrades and platform stability.
- Track and remediate vulnerabilities across endpoints, network, Windows and Linux within SLA.
Tenable SCNessusSEBI CSCRFNCIIPCBASCART
-
Consultant
KPMG Global Services (KPMG Australia)
- Provided strategic data insights to stakeholders using Python, AI models and internal KPMG tools.
- Automated data workflows and preprocessing with Python, Alteryx and Databricks to improve efficiency and data quality.
- Designed and deployed interactive Tableau and Power BI dashboards for executive reporting.
- Conducted financial due diligence and delivered analytics‑driven solutions for global clients.
PythonAlteryxDatabricksTableauPower BI
-
Associate
PricewaterhouseCoopers Pvt Ltd (PwC)
- Identified and reported 50+ critical web and 10+ critical mobile vulnerabilities across client environments using Burp Suite, Frida and MobSF.
- Designed and executed phishing campaigns targeting 200–250 users with custom phishing pages, then led cyber‑awareness sessions afterwards.
- Automated vulnerability data analysis with Python and Power BI so CISOs and CIOs could spot threat trends and act on them.
- Conducted SAST, DAST and Nessus‑based assessments on web, API and mobile applications across multiple clients.
- Performed root cause analysis for security incidents in high‑risk environments and delivered remediation strategies.
- Mentored junior analysts in vulnerability assessment, secure code review and security analytics.
Burp SuiteFridaMobSFPhishing simulationPowerShellRCA
-
Software Developer Intern
Nomura Holdings
- Built a Python RFB Checker with Flask and REST APIs, with email notifications for the security team's workflow.
- Developed a real‑time employee tracking web app with Flask, React and JavaScript for security monitoring.
- Contributed to a CV‑Scraper ML model reaching 80% accuracy using Streamlit, AWS Comprehend and Lambda.
- Deployed containers on Red Hat servers with Jenkins and Ansible, cutting deployment time by 40%.
- Replaced legacy batch scripts with Python, improving transaction performance by 90%.
- Built a web tool to restart Pro‑Watch and CCTV services, reducing downtime by 70%, and supported the Pro‑Watch 4.0 to 5.5 migration and DR drills.
FlaskReactAWSJenkinsAnsibleDocker
03 / Skills
The toolkit.
Governance & compliance
SEBI CSCRFNCIIPCSystem auditsRoot cause analysis
Languages
PythonJavaJavaScriptPHPPowerShellRCSS3
Frameworks
DjangoFlaskAngularBootstrapREST
Data & BI
Power BITableauAlteryxDatabricks
Databases & cloud
MySQLMSSQLAmazon RDSDynamoDB
CI/CD & DevOps
DockerJenkinsAnsibleGitLabBitbucket
04 / Certifications & education
Verified, not just listed.
- DSCI Certified AI Native Security Researcher Verify ↗
- EC‑Council Certified Ethical Hacker v12 Master Verify ↗
- ISC2 Certified in Cybersecurity (CC) Verify ↗
- Microsoft Power BI Data Analyst Associate Verify ↗
- Microsoft Azure Fundamentals Verify ↗
- IBM Data Science Professional Verify ↗
- Alteryx Alteryx Core Verify ↗
2021 — 2023
Master of Technology, Computer Science
Indian Institute of Information Technology, Pune
2017 — 2021
Bachelor of Engineering, Computer Engineering
Pillai College of Engineering, New Panvel
05 / Projects & research
Things I've built.
Security · Machine learning
Phishing Detection System
Predicts whether a given website is safe or a phishing page, using machine‑learning classifiers over features scraped from the live site.
PythonTensorFlowBeautiful Soup
Deep learning · Published
Speech Regeneration using Lip Reading
A model that repairs corrupted audio by reading the speaker's lips. Published in IJCRT, May 2021.
TensorFlowCUDAcuDNN
Deep learning · Computer vision
Anomaly Detection
Detects multiple anomaly types using a pre‑trained VGG‑16 backbone, trained on a large dataset collected for the project.
VGG‑16Transfer learningPython
Machine learning · Web
Travel Insurance Claim Prediction
Forecasts whether a client will claim travel insurance from their financial history, served through a Flask web application.
Machine learningFlask APIPython
Android
College Indicator
Students view timetables and results and chat with each other; teachers change schedules and push notifications.
JavaFirebaseAndroid
GitHub
More on GitHub ↗
CV screening, secure chat, data‑science notebooks and other experiments.
Publication
A. Maheshwari, S. Kuvar, O. Shetty, S. Ojha, V. Bhojane, “Speech Regeneration Using Lip Reading,” International Journal of Creative Research Thoughts (IJCRT), ISSN 2320‑2882, vol. 9, issue 5, pp. d713–d716, May 2021. Read the paper ↗
Achievements
- Top 10 of 55+ teams at the Headout‑sponsored hackathon, Prototype.
- Active competitive programmer across online coding platforms.
- Captained the university table tennis team; U‑18 inter‑school player.
06 / Contact
Have a system that needs a second pair of eyes?
I'm always happy to talk security assessments, automation and compliance.
skuvar4@gmail.com