About

I am Kanimozhi Murugesan, a B.Tech in Information Technology graduate from Vivekanandha College of Technology for Women, set to complete my degree in 2026. During my studies, I gained hands-on experience in application security through internships at Cappriocio Securities and BloomSkillTech, where I developed secure REST APIs, conducted penetration testing, and identified vulnerabilities in web applications. My technical skills include Java, JavaScript, Python, REST APIs, SQL, and security tools like Burp Suite and OWASP ZAP. I am eager to take on my first full-time role as a Software Engineer, focusing on building secure and robust applications.

Experience

1. Security Analyst Intern

   BloomSkillTech

   Jan 2025 – Mar 2025

   Conducted web application penetration testing against OWASP Top 10 vulnerabilities using Burp Suite and OWASP ZAP. Identified authentication, authorization, injection, session management, and business logic vulnerabilities. Produced professional client-facing reports with CVSS scoring, proof-of-concept validation, risk analysis, and remediation guidance. Performed manual secure code reviews to validate vulnerability root causes and recommend secure remediation.

2. Developer Intern

   Cappriocio Securities

   April 2024 – June 2024

   Developed secure REST APIs using Java and Spring Boot. Implemented authentication and authorization mechanisms following secure coding practices. Participated in code reviews, testing, debugging, and Agile software development. Improved backend performance through SQL optimization and application tuning. Applied secure coding principles to reduce common application security risks.

Education

1. Vivekanandha College of Technology for Women

   Bachelor of Technology (B.Tech), Information Technology

   2022 – 2026 · Grade: 7.93

Projects

• Trace & Strike Autonomous AppSec platform

  • Java
  • SAST
  • DAST

  Developed as an autonomous Application Security orchestration system combining custom Java-based SAST engines with dynamic DAST validation. The static analyzer was engineered by parsing source code into Abstract Syntax Trees (AST) and constructing precise data-flow graphs to track untrusted inputs from sources to execution sinks.

• ScanAI – AI-Powered Autonomous Penetration Testing Agent

  • Kali Linux
  • Python
  • Security Tools

  Developed ScanAI, a Kali Linux-based autonomous penetration testing platform leveraging agentic workflows to automate the cyber kill chain. Programmed intelligent workflow chaining to correlate telemetry from 23 integrated Kali security tools, executing asset reconnaissance, vulnerability discovery, and automated attack-path analysis.

Certifications

• eWPTX

  eWPTX

• CLLMSP

  CLLMSP

• CNSP

  CNSP

• CAP V2

  CAP V2

• Spring 5 Basics with Spring Boot

  Infosys Springboard

• Spring REST

  Infosys Springboard

• Spring Data JPA with Boot

  Infosys Springboard

Achievements

• eWPTX Certified

  2026

  eWPTX Certification