Nidhi Verma

Senior Software Engineer

Hyderabad, Telangana, India13 yrs 6 mos experience

Most Likely To SwitchHighly Stable

Key Highlights

Expert in Secure Development Lifecycle practices.
Proficient in penetration testing and vulnerability assessment.
Strong background in web and mobile application security.

Stackforce AI infers this person is a Cybersecurity professional with a focus on application security and vulnerability management.

Contact

Skills

Core Skills

Application SecurityVulnerability AssessmentPenetration Testing

Other Skills

API SecurityAutomationCC++CLI SecurityCryptographyCybersecurityDynamic Application Security testingEthical HackingExploit WritingFuzzingHTMLHost Intrusion PreventionInformation SecurityIntrusion Detection

About

Secure Development Lifecycle, Linux tools development, Product Security, Vulnerability Assessment, Penetration Testing, Static Analysis, Code Review, Web application security, CLI security, Network Security, Python scripting and automation, Threat Modelling, CVSS, Security Scanning (Nessus, qualys, retina, IBM appscan), Kali Linux, Fuzz Security Testing, OllyDbg, Gdb, STRIDE

Experience

Microsoft

2 roles

Senior Software Engineer

Promoted

Sep 2023 – Present · 2 yrs 6 mos

SDE-2

Mar 2020 – Sep 2023 · 3 yrs 6 mos

O365 DataCenter security team.

Oracle

Senior PenTest Engineer

Jul 2019 – Mar 2020 · 8 mos · Hyderabad Area, India

Security assessment and pentesting for FBGBU softwares and POS machines.

Dell emc

Senior Security Engineer

Feb 2017 – Jul 2019 · 2 yrs 5 mos · Bengaluru Area, India

Responsible for follwing Secure Development Lifecycle practices for all major and minor releases: Static Application Security testing, Dynamic Application Security testing, OWASP top 10, Vulnerability Assessment, Web Application Security with Owasp Zap and Burp Suite, Pentesting with Kali Linux tools, API Security, Fuzzing, CLI Security, Network Security and Services Security
Responsible for security testing on user access authentication and authorization, Encryption at Rest and Key management
Identify, create and run security test cases to discover vulnerabilities.
Document, log and generate reports for the discovered vulnerabilities
Security scanning and reporting using tools like Nessus, qualys, Retina, IBM Appscan
Contributing to automation framework in Python scripting and automated test cases.
Identify and report bugs using static code analysis tool Coverity and Findbugs.
Analyze the threat model to idenitfy potential vulnerable surface
Writing
security tests (Manual/Automated).
Common Criteria certification for DataDomain

Secure Development LifecycleStatic Application Security testingDynamic Application Security testingVulnerability AssessmentWeb Application SecurityPentesting+7

Freecharge

Security Engineer

Feb 2016 – Feb 2017 · 1 yr · Bengaluru Area, India

Responsible for identifying security gaps and vulnerabilities on mobile(IOS, Android & WinPhone) & web.
Perform penetration testing focusing on mobile & web security using both automated and manual techniques.
Monitor and detect any potential security threats and risks to the organisation, using the available technology toolset.
Generate reports and provide solutions that effectively & efficiently remediate Security issues.

Penetration TestingMobile SecurityWeb SecurityVulnerability Assessment