Headline

Application Security Consultant | Application Security Engineer | Penetration Testing | Cloud Security | VAPT | API Security | DevSecOps | SSDLC | ASVS

About

DevSecOps Security professional with over 10+ years of hands-on experience in: application security assessments, vulnerability assessments, devsecops and penetration testing. Proficient in conducting manual application penetration testing and code reviews, and skilled in using various tools and frameworks such as OWASP ZAP, Burp Suite. In-depth knowledge of secure software development lifecycle (SDLC) and OWASP resources, as well as national and international laws, regulations, policies, and ethics related to vulnerability assessment and penetration testing. In Summary: * Design Secure Applications * Help Develop Secure Applications * Help Deploy Secure Applications

Location

Delhi

Work experience

Senior Security Consultant 3 at EY, Dec 2024 - Present · 1 yr 5 mos, Noida, Uttar Pradesh, India, • Specialize in DevSecOps, Threat modeling, ASVS implementation, SAST, DAST, SCA • Conducting penetration testing and source code reviews to ensure secure project environments. • Application Vulnerability management and API security contributed to a secure application security program • Application Architecture review

Technical Consultant - Application Security at IBM, May 2022 - Dec 2024 · 2 yrs 8 mos, Gurugram, Haryana, India, Client- Fintech * DevSecOps: Integration of security into SDLC, secure CI/CD pipelines * Dynamic Application Security Testing (DAST): Appscan, Burpsuite * Static Application Security Testing (SAST): Checkmarx, Sonarqube * Software Composition Analysis (SCA) * Container Security: PrismaCloud, Docker, Kubernetes * Secure coding practices * Application Vulnerability management * Threat modeling and OWASP ASVS

Application Security Analyst at Tata Consultancy Services, Jan 2019 - May 2022 · 3 yrs 5 mos, India, Client- Kimberly Clark * Web Application vulnerability assessment (DAST/SAST) * Mobile Application vulnerability assessment and penetration testing * Helping customers mitigate web application security risks * Conducting Checkmarx Code review and secure SDLC enforcement * Conducting Red Team Phishing Exercises

Senior Security Engineer at Lucideus, Jan 2018 - Jan 2019 · 1 yr 1 mo, Delhi, India, Client-Bombay Mercantile Bank, AXIS Bank, ICICI Bank, Adani Group, Euronet Worldwide, ITC, MTR. Lucideus now known as "Safe Security" * Vulnerability assessment and Penetration Testing of websites of Banks and conglomerates of India as per OWASP Standards * Network Security Assessment with Nessus and Nmap * Providing support to developer teams with Vulnerability patch assistance * Project Delivery and Management for a team of 10 engineers * SAST and DAST Delivery

System Security Analyst at KBC Bank Ireland, Jan 2017 - Dec 2017 · 1 yr, County Dublin, Ireland, Job duty incorporates: * Internal and Internet facing application security and penetration testing * running Nessus and performing Vulnerability Management * find and report phishing emails in Cisco Ironport * Monthly reports to CISO to discuss the overall security posture * Implementation of new security devices and services for the bank

System and Application Test and Security Engineer, Project- GLOW (Global Workspaces) at KBC Bank Ireland, Jul 2016 - Dec 2016 · 6 mos, Dublin, County Dublin, Ireland, Application integration and test engineer. Managing infrastructure for deployment of new applications while supporting a global internal network.<br>* Packaging SCCM applications<br>* Manual Testing of Windows applications<br>* Infrastructure Build<br>* Server Build<br>* Active Directory Migration support

Education

Master’s Degree, Information and Network Security, University of Limerick

Bachelor of Engineering (B.E.), Computer Science and Engineering, Rajiv Gandhi Prodyogiki Vishwavidyalaya