Udhaya Shankar Korla
Bangalore
Summary
Accomplished WAF Security Researcher at Akamai Technologies, adept in advanced penetration testing and WAF bypass techniques. Successfully developed automated Python tools, enhancing vulnerability assessment efficiency by 40%. Proven ability to lead red team operations while effectively communicating technical findings to clients, ensuring robust security postures across diverse environments.
Overview
1
1
Language
1
1
Certification
9
9
years of professional experience
Work History
WAF Security Researcher 2
Akamai Technologies
Bangalore
06.2024 - Current
- Specializing in Web Application Firewall (WAF) research, bypass techniques, and evasion methodologies
- Executed advanced penetration testing on Akamai's Kona Site Defender and Enterprise Application Security solutions to identify vulnerabilities
- Developing Proof-of-Concept exploits for WAF bypass vectors including encoding evasion, HTTP smuggling, and parameter pollution
- Collaborating with security research team to identify and document emerging attack patterns against web applications
- Performing red team exercises simulating real-world adversarial techniques against client infrastructures
- Developed custom Python scripts for automated security testing and vulnerability discovery, enhancing testing efficiency
- Delivered technical guidance to clients on WAF optimization and security hardening strategies, improving their web application security posture
- Contributing to internal security research publications and threat intelligence sharing
Sr. Cyber Security Analyst
Levi Strauss & Co.
Bangalore
02.2021 - 05.2024
- Conducted red team assessments simulating advanced persistent threats (APTs) against critical infrastructure
- Led penetration testing engagements for web applications, APIs, and internal networks across global enterprise environment
- Specialized in WAF bypass techniques for ModSecurity and cloud-based WAF solutions
- Developed automated Python scanning tools, decreasing vulnerability assessment time by 40%
- Performed mobile application security testing for iOS and Android platforms using static and dynamic analysis
- Conducted API security assessments including authentication bypass, injection flaws, and business logic vulnerabilities
- Delivered detailed technical reports featuring CVSS scoring, risk ratings, and prioritized remediation recommendations to enhance security posture
- Trained junior analysts in penetration testing methodologies and security testing best practices, fostering skill development and team capability
- Ensured compliance with PCI-DSS, ISO 27001, and SOC 2 security frameworks through regular testing
Associate Analyst - Security
NetEnrich Technologies BVT Ltd.
Bangalore
05.2017 - 01.2021
- Performed vulnerability assessments and penetration testing for diverse client portfolio across banking, healthcare, and e-commerce sectors
- Utilized Kali Linux and BurpSuite Pro for web application and network penetration testing
- Conducted manual security testing to identify logic flaws and authorization bypasses
- Created comprehensive security reports detailing vulnerabilities, analyzing impacts, and recommending mitigation strategies
- Conducted public discovery assessments to identify organizational digital exposures and attack surfaces
- Collaborated with senior analysts on complex penetration testing engagements and red team operations
Education
B-Tech - Computer Science and Engineering
RGUKT, AP-IIIT Nuzivid
01-2017
Dual Degree - Management Studies
01-2017
Pre University Course -
01-2013
SSC -
AP State Board
01-2011
Skills
- Penetration Testing & Red Team:
- - Network Penetration Testing (Internal/External)
- - Web app pentesting
- - API pentesting
- - Mobile app pentesting
- - Cloud security testing
- - Wireless Network Penetration Testing
- - Social engineering assessments
- - Red team operations
- - WAF bypass techniques
- - Exploit development
- Core Competencies:
- - Vulnerability Assessment & Management
- - Application Security Testing
- - Manual security testing
- - Python Automation & Scripting
- - REST API Testing
- - Network Security Analysis
- - Technical reporting
- Tools & Technologies:
- - WAF Bypass: ModSecurity, Cloudflare WAF, AWS WAF, Akamai Kona Site Defender
- - Pentesting frameworks
- - Network tools
- - Exploitation tools
- - Wireless: Aircrack-ng, Reaver, Pixiewps
- - Cloud: AWS CLI, Azure CLI, GCP SDK, ScoutSuite, Prowler
- - Scripting: Python, Bash, PowerShell
- - OSINT tools
- - Reporting tools
Personal Information
- Title: Senior Security Researcher | Pentesting & Red Team Specialist
- Availability: Available for freelance pentesting projects (remote/on-site)
ADDITIONAL INFORMATION
- Languages: English (Fluent), Telugu (Fluent), Hindi (Conversational)
- Availability: Available for freelance pentesting projects (remote/on-site)
- References: Available upon request
- GitHub: github.com/udhaya-sharkar (optional - add if available)
Languages
English
Advanced (C1)
C1
Certification
- OSCP
Timeline
WAF Security Researcher 2
Akamai Technologies
06.2024 - Current
Sr. Cyber Security Analyst
Levi Strauss & Co.
02.2021 - 05.2024
Associate Analyst - Security
NetEnrich Technologies BVT Ltd.
05.2017 - 01.2021
B-Tech - Computer Science and Engineering
RGUKT, AP-IIIT Nuzivid
Dual Degree - Management Studies
Pre University Course -
SSC -
AP State Board