Saravanan Gunasekaran

DevOps Manager

Bengaluru, Karnataka, India14 yrs experience

Most Likely To SwitchHighly Stable

Key Highlights

8 years of experience in vulnerability assessment.
Expertise in both automated and manual penetration testing.
Proficient in various web vulnerability tools.

Stackforce AI infers this person is a Cybersecurity Specialist with extensive experience in vulnerability assessment and penetration testing.

Contact

Skills

Core Skills

Vulnerability AssessmentPenetration TestingPci Dss ImplementationWeb Application Security Testing

Other Skills

Automation ScriptingDefect ReviewDynamic AnalysisEthical HackingFalse Positive AnalysisForensic AnalysisKali LinuxManual TestingMetasploitMobile SecurityNetwork SecurityNmapOWASPPCI DSSRational AppScan

About

Total 8 Years of experience in Vulnerability assessment and penetration testing.  Deep Exposure to Ethical Hacking.  Automated as well as Manual VAPT for web, mobile, Web Service, Think client, and network.  Web vulnerability tools like AppScan [IBM], Acunatix, Nessus, Metasploit.  Proxy tools like Burp Suite, and Paros.  Port scanner like Nmap tool.  Web site crawler tools like Screaming Frog.  Firefox add-ons like Tamper data, SQL inject me, Firebug and web developers tools.

Experience

14 yrs

Total Experience

2 yrs 4 mos

Average Tenure

5 yrs 4 mos

Current Experience

Standard chartered bank

Senior Specialist, Security Penetration Testing

Dec 2020 – Present · 5 yrs 4 mos

Capgemini

Senior Security Consultant

Jun 2018 – Nov 2020 · 2 yrs 5 mos · Bangalore

Cognizant

Associate

Aug 2016 – Jun 2018 · 1 yr 10 mos

Managing a team of five members in offshore and coordinating with onsite team.
Verifying the security of the application and all network components along with the verifying other security parameters including physical security controls.
Consultation on secure designing of the application.
Conducting Risk Assessment for application.
Evaluating and proposing new security tools to the CS team.
Working with middle level management to create security policy and incident handling policy.
Conducting security awareness training.
Writing automation scripts to reduce the manual efforts.
Conducting Info Sec Audits
Conducting vulnerability analysis and penetration for web and mobile application.
Defect review and classification with assignment of severity.
Working with developer to fix the vulnerability.

Vulnerability AssessmentPenetration TestingRisk AssessmentSecurity Policy CreationSecurity Awareness TrainingAutomation Scripting

Robert bosch engineering and business solutions

Software Engineer

Jun 2015 – Jul 2016 · 1 yr 1 mo

Verifying the security of the application and all network components.
Consultation on secure designing of the application.
Conducting Risk Assessment for application.
Evaluating and proposing new security tools to the management.
Conducting vulnerability analysis and penetration for web and mobile application.
Defect review and classification with assignment of severity.
Working with developer to fix the vulnerability.

Vulnerability AssessmentPenetration TestingRisk AssessmentSecurity Tool Evaluation

Sisa information security

Associate Consultant

Dec 2014 – Jun 2015 · 6 mos · Bengaluru Area, India

Implementing PCI DSS for organizations
PA-DSS Certification for applications
Performing Application (Web / Mobile / Network) Penetration Testing following OWASP and PCI Guidelines.
Handling end to end delivery of Application PT Services
Leading the Application PT Team
Performing Static, dynamic and forensic analysis
Test Plan, Test Case and Test Scenario development
Test Design and Execution
Defect review and classification with assignment of severity.
False positive analysis for tool reports.
Summary Report preparation.
Working with client to fix the vulnerability

PCI DSS ImplementationPenetration TestingStatic AnalysisDynamic AnalysisForensic Analysis

Stqc

Web application security testing Engineer

Feb 2012 – Dec 2014 · 2 yrs 10 mos · Chennai Area, India

Performing Web application security testing following OWASP standards for various e-Governance and government application .
Test Plan, Test Case and Test Scenario development.
Test Design and Execution
Defect review and classification with assignment of severity.
False positive analysis for tool reports.
Summary Report preparation and Verification.
Working with client to fix the vulnerability

Web Application Security TestingTest PlanningDefect ReviewFalse Positive Analysis