Sr. CYBERSECURITY ARCHITECT
1. Cyber Security services hands on experience in Threat Modeling (STRIDE/DREAD), Web Application Penetration Testing (WAPT), Security Focused Functional Testing (SFFT), Infrastructure Penetration Testing (VAPT), Mobile Application Security Testing (MAST) and Secure Code Review (SCR), Vulnerability Management (VM).
2. Consultant: Worked closely with Scrum master, Service Owners and developers to educate them about the High/Critical vulnerabilities with impact and remediation steps. Took part in Log4j and Log4shell remediation process to protect overall organization assets
3. Vulnerability assessment and Penetration testing: Performed scanning Web and Mobile Applications vulnerabilities and launch attacks in QA builds using ZAP proxy, Burp Suite pro, NESUS, SysInternal for Thick Client apps, Uniscan, NMap, Rapid7, Fortify, HCL AppScan, Metasploit, WireShark, MobSF, Qualys (VM & WAS) tools and Insight VM like NEXPOSE for Network security.
4. Threat Modelling: Designed ‘DREAD’ and ‘STRIDE’ Threat Modeling with mitigation and costs architecture using “Data Flow Diagram” for E-Commerce and Fintech business applications (Website and Mobile). Performed Security configuration audit and Manual Code Reviews.
Tools:
Basecamp, Bitbucket, Azure, Salesforce, Service Now, SAP, JIRA, Jenkins, Postman (For API Testing), Android Studio, XCODE, SourceTree, Zap Proxy, VSTS, Burp Suite pro, Uniscan, OpenSSL, Metasploit, WireShark, AppScan by HCL, Nexpose, Fortify, MobSF, NMap, SysInternals, QualysGuard, AppSpider pro, Zenmap, Linux Tools, Rapid7, Secure Track, CMDB, MS-Excel (VLookUp, PIVOT, Graphical implementation, Macros and others), RAPID7.