Thanmayee Rao

Security Engineer

Ireland12 yrs 8 mos experience

Highly Stable

Key Highlights

Over 12 years of diverse Cyber Security experience
Expert in Offensive and Application Security
Strong communication and mentorship skills

Stackforce AI infers this person is a Cyber Security expert with extensive experience in offensive and application security.

Contact

Skills

Core Skills

Offensive SecurityApplication SecurityInformation SecurityRisk ManagementPenetration TestingTeam LeadershipWeb Application SecurityNetwork Security

Other Skills

API SecurityAPI TestingAmazon Web Services (AWS)AppspiderBurp SuiteCC++Compliance PostureComputer ForensicsConfiguration AuditCryptographyCyber-securityDAST Process BuildingDynamic Application Security AssessmentsFirewalls

About

A Cyber Security expert with over 12 years of diverse experience in areas like Offensive Security, Application Security, Penetration Testing, Incident Management, Security Architecture & Consulting. A curiosity-driven post-graduate in Cyber Defence from Dakota State University, with excellent communication and interpersonal skills.

Experience

Amazon

Senior Security Engineer

Feb 2022 – Present · 4 yrs 1 mo · Dublin, County Dublin, Ireland

Threat Emulation and Red Team
Security Incident Management
Offensive Security
Application Security
Mentorship & Training

Threat EmulationRed TeamSecurity Incident ManagementOffensive SecurityApplication SecurityMentorship+1

Target

3 roles

Lead Cybersecurity Analyst, Business Information Security Office (BISO)

Promoted

Apr 2020 – Jan 2022 · 1 yr 9 mos

Provide security advisory services that align with the business, security, and compliance objectives of the company. Accountable for the security & compliance posture of all new and legacy technologies of Target’s legal, intelligence and core data systems.
Lead the identification and prioritization of information security risks, advise business leadership on security requirements and solutions, assess their overall risk posture, help prioritize the remediation .
Represent the team as a thought leader on information security, Bridge the gap between technical and non-technical audiences to translate IT risk into business risk and serve as subject matter expert and communications conduit between diverse security teams including security testing, threat intelligence, and incident response.
Conduct analysis and trending on internal or external progress or events affecting security. Utilize technical expertise and threat modelling to develop security solutions for new and unusual architectures

Security Advisory ServicesRisk IdentificationCompliance PostureSecurity RequirementsThreat ModellingSecurity Solutions+2

Lead Security Engineer

Jul 2019 – Apr 2020 · 9 mos

Penetration Testing & Peer Reviews
Lead the team on Pentest & DAST process building and initiatives
Mentorship & Training
Representing Security across Target

Penetration TestingPeer ReviewsDAST Process BuildingMentorshipTeam Leadership

Senior Security Engineer

Aug 2016 – Jul 2019 · 2 yrs 11 mos

Web Application and Network Penetration Testing
Dynamic Application Security Assessments
Secure Code Review and Scanning
Coordinate with developers for Issue Remediation

Web Application Penetration TestingNetwork Penetration TestingDynamic Application Security AssessmentsSecure Code ReviewWeb Application SecurityNetwork Security

Paladion

3 roles

Senior Analyst and Tech Specialist - Security Testing

Promoted

Apr 2015 – Aug 2016 · 1 yr 4 mos

Web Application Penetration Testing, Mobile Application Testing, Secure Code Review for web applications, Network Penetration Testing, Configuration Audit for various devices and servers, Web Services Testing, API Testing - REST and SOAP APIs, Thick-Client Testing.
Handle multiple application security assessments, network vulnerability assessments and mobile application security assessments independently.

Web Application Penetration TestingMobile Application TestingSecure Code ReviewNetwork Penetration TestingConfiguration AuditAPI Testing+2

Analyst - Security Testing

Apr 2014 – Apr 2015 · 1 yr

Web Application Penetration Testing, Network Penetration Testing, Configuration Audit for various devices and servers.

Web Application Penetration TestingNetwork Penetration TestingConfiguration AuditWeb Application SecurityNetwork Security

Security Engineer

Jul 2013 – Apr 2014 · 9 mos

Information Risk Management, Web Application Penetration Testing, Network Penetration Testing and Secure Configuration Review.

Information Risk ManagementWeb Application Penetration TestingNetwork Penetration TestingSecure Configuration ReviewInformation SecurityRisk Management