Jan 2021 – May 2021 · 4 mos · Pittsburgh, Pennsylvania, United States

• 18-732 - Secure Software Systems

May 2020 – Aug 2020 · 3 mos · United States

• Designed and built a self-service pipeline for Dynamic Application Security Testing [DAST]
• Worked on integrating Semgrep rules into the CI build process to perform detailed and regular Code Analysis.
• Built centralized report storage and stats reporting for Product Security controls at Splunk. Used Splunk for visualization and AWS for report storage and metric collection.

Jan 2020 – Jan 2021 · 1 yr · Pittsburgh, Pennsylvania, United States

• 14-761 - Applied Information Assurance

Jan 2018 – Jul 2019 · 1 yr 6 mos

• Development and Maintenance of Cloud Automation Framework which is consumed by the Endpoint division for deployment and automation.
• Contributed to the CI/CD goals by designing and implementing pipelines to automate and enhance the build verification process
• Ansible, Jenkins, Apache Groovy, Python, Teamcity, vCloudAir

Jun 2016 – Dec 2017 · 1 yr 6 mos

• Developed benign exploits and internal tools to verify the efficacy of Exploit guard [Endpoint's behavior based detection engine]
• Contributed to the functional test automation of multiple detection engines in the Endpoint Security Product ( FireEye-HX) [Exploit Guard, IOC Matching, Antivirus, Malware guard]
• Developed unit tests for the Windows kernel mode mini filter driver
• Python, C++, Windows Internals, Binary Exploitation, x86 Assembly

May 2015 – Jul 2015 · 2 mos · Bengaluru Area, India

• Developed a performance monitor framework which collects and analyzes system performance metrics from multiple client machines and sends periodic comparison reports and performance graphs to the key stakeholders.