PPUGALARASANSecurity / Dev View Resume
Currently at WHALEBIUM

Hello, I’m

Pugalarasan

Find me online as 0xPugal

Cyber Security Engineer

I find security weaknesses and build the tools that fix them at scale. My work spans offensive testing, secure delivery, automation, and open-source developer tooling.

LinkedIn View Resume
Experience3+ years
FocusAppSec · Red Team · Dev
Open source10+ projects
Certifications4 held
01Experience

WHALEBIUM

Cyber Security Engineer

Current
  • Lead offensive security programmes across web, API, and cloud environments, owning scoping, testing cadence, and reporting quality.
  • Build internal tooling that turns reconnaissance, validation, and remediation tracking into a repeatable engineering workflow.
  • Partner with engineering teams on secure-by-default delivery, remediation guidance, and security reviews of new features.
Coimbatore, Tamil Naduwhalebium.com

PitoWings

Cyber Security Engineer

Previous
  • Conducted end-to-end vulnerability assessment and penetration testing (VAPT) across web applications, APIs, and cloud environments.
  • Identified security flaws and produced prioritised remediation strategies with clear, actionable reporting.
  • Developed and automated security tooling to streamline testing and generate detailed security reports.
  • Collaborated with development teams to strengthen application security and delivery practices.
Coimbatore, Tamil Nadupitowings.com

Pentafox Technologies

Software Security Engineer Intern

  • Assisted in API security assessments, identifying vulnerabilities and documenting findings for the engineering team.
  • Applied web security testing tools and methodologies to analyse and report potential security issues.
Remotepentafox.in
02Skills
01

Security assessment

Structured validation across applications, APIs, infrastructure, and cloud environments.

  • Vulnerability assessment
  • Penetration testing
  • Web & API security
  • Network & cloud testing
02

Offensive security

Adversary-led testing focused on practical exposure, attack paths, and measurable risk.

  • Red teaming
  • Attack surface management
  • Privilege escalation
  • Security automation
03

Development

Purpose-built software and automation for repeatable security engineering workflows.

  • Python
  • Bash
  • Golang
  • REST APIs
04

DevSecOps

Security integrated into engineering delivery, source control, and data workflows.

  • SAST / DAST
  • PostgreSQL
  • Git / GitHub
  • Docker & CI/CD
03Projects
Bash

SubDomz

Passive subdomain discovery across multiple tools, search engines, and services.

ReconAutomation
Bash

KNOXSSer

A concise XSS scanning workflow powered by the KNOXSS API, with batch input and JSON output.

XSSAppSec
Data

fuzz4bounty

Curated 1337 wordlists for bug bounty hunting, application testing, and focused fuzzing.

WordlistsFuzzing
Go

Dedupe

Fast, memory-efficient URL deduplication with query, extension, and filtering controls.

CLIPerformance
04Education

K. S. Rangasamy College of Technology

Bachelor of Engineering — Computer Science and Engineering

Previous
  • Graduated with a CGPA of 8.31 in Computer Science and Engineering.
  • Core foundations in data structures, operating systems, computer networks, and database systems.
  • Applied engineering fundamentals to hands-on security research, automation, and open-source tool development.
CGPA 8.31/Tiruchengode, Tamil Nadu

SSRM Hr Sec School

Higher Secondary Certificate

  • Completed the higher secondary programme prior to engineering studies.
Karuppur, Salem, Tamil Nadu

Swami Vivekanandha Vidhyalaya Matric Hr Sec School

Matriculation (SSLC)

  • Completed secondary schooling with a matriculation certificate.
Kadayampatti, Salem, Tamil Nadu
05Certifications
INE Security

eJPT — Junior Penetration Tester

Verify credential
The SecOps Group

Certified AppSec Pentester (CAPen)

Verify credential
INE Security

ICCA — INE Certified Cloud Associate

Verify credential
The SecOps Group

Certified AppSec Practitioner (CAP)

Verify credential
06Achievements
Responsible disclosureBug bounty hunter

Recognized with monetary rewards, acknowledgements, merchandise, and Hall of Fame placements for responsibly disclosed vulnerabilities.

Open sourceHacktoberfest 2022, 2023 & 2024

Three consecutive years contributing to open-source projects through the DigitalOcean Hacktoberfest program.