About me

Hi, I’m Sourav Sen — a curious mind with a deep passion for breaking, building, and securing systems. I specialize in offensive security, with a focus on web applications, APIs, and thick clients. Whether it's dissecting complex application logic, exploring edge-case vulnerabilities, or diving into low-level behavior, I love uncovering the unexpected.

I enjoy challenges that require thinking creatively and digging deep. My approach blends hands-on technical skill with an obsession for detail and impact. From red teaming concepts to real-world exploitation, I’m always looking for ways to push boundaries and explore the limits of what’s possible — responsibly, of course.

Over the years, I’ve worked with amazing teams, contributed to impactful assessments, researched vulnerabilities, and shared my knowledge through blog posts and internal tooling. I believe in clean reporting, clear communication, and continuous learning.

Outside of security, I’m always experimenting — with code, ideas, or the next rabbit hole the internet leads me down. This site is a glimpse into my journey, the things I create, and the skills I bring to the table.

Let’s build, break, and secure — better.

What i'm securing

  • design icon

    Web Applications

    Manually breaking web apps to uncover real-world vulnerabilities and help secure what matters.

  • laptop-application

    Thick Clients

    Reversing, inspecting, and exploiting thick clients to uncover deep-rooted security flaws beneath the UI.

  • mobile app icon

    APIs

    Probing APIs to reveal logic flaws, broken auth, and the hidden gaps attackers love to exploit.

  • camera icon

    Networks

    Mapping, probing, and exploiting networks to identify weaknesses before adversaries do.

Resume

Experience

  1. Security Engineer - II | Security Innovation

    Oct 2024 — Present
  2. Security Enginner - I | Security Innovation

    Mar 2023 - Sep 2024
  3. Security Researcher Intern | Fourcore Labs

    Sep 2022 - March 2023
  4. Jr. Cyber Security Analyst | Audix Technologies

    Mar 2022 - Aug 2022

Certifications

  1. Offensive Security Web Expert (OSWE) | Offensive Security

    Feb 2025

  2. Offensive Security Certified Professional (OSCP) | Offensive Security

    March 2022

  3. eLearnSecurity Web application Penetration Tester eXtreme v2 (eWPTXv2) | INE

    Nov 2023

  4. eLearnSecurity Cetified Penetration Tester eXtreme v2 (eCPTXv2) | INE

    Oct 2022

  5. Certified Red Team Master (CRTM aka PACES) | Altered Security

    Feb 2024

  6. CREST Registered Penetration Tester (CRT) | CREST

    Feb 2025

  7. CREST Practitioner Security Analyst (CPSA) | CREST

    Feb 2025

Education

  1. Bachelor of Technology (B.Tech) - Computer Science & Engineering

    Aug 2019 — July 2023

    University - Maulana Abul Kalam Azad Univerity of Techonology (MAKAUT) CGPA - 8.7

My skills

  • Web Application & API Security
    95%
  • Network & Enterprise Security
    90%
  • Thick Client Security
    70%
  • Mobile Application Security
    50%

Achievements

Contact

Contact Form