Altamash B.

DevOps Manager

Bengaluru, Karnataka, India0 mo experience

AI EnabledAI ML Practitioner

Key Highlights

Ranked among top 500 security researchers globally.
Identified multiple zero-day vulnerabilities in leading platforms.
Expert in integrating security within DevOps processes.

Stackforce AI infers this person is a Cybersecurity expert with a focus on application and network security.

Contact

Skills

Core Skills

Application SecurityPenetration TestingNetwork SecuritySecurity Research

Other Skills

APIAnalytical SkillsAndroid DevelopmentAndroid securityArtificial Intelligence (AI)Bug bountyCISACloud ComputingCloud SecurityCode ReviewContainer SecurityCyber Threat Intelligence (CTI)CybersecurityDASTDevOps

Experience

Warehouse factory ltd.

2 roles

Senior Security Analyst

Promoted

Jan 2020 – Present · 6 yrs 3 mos · Remote

Spearheaded end-to-end security assessments for applications and web services, identifying vulnerabilities to ensure robust digital environments.
Collaborated closely with development teams throughout the SDLC, integrating security practices from inception to deployment.
Designed and enforced security policies at the pod level for Kubernetes environments, fortifying containerized applications against threats.
Championed the integration of security within DevOps processes, ensuring a continuous security aspect in our CI/CD pipeline.
Conducted static and dynamic security analyses on Android applications, using advanced tools to uncover and mitigate vulnerabilities.
Applied reverse engineering and dynamic analysis techniques to secure thick clients, enhancing security for applications not designed for web environments.
Oversaw the security review of games before their integration into cloud gaming platforms, setting high standards for data protection and integrity.
Conducted in-depth analysis of android applications to identify security vulnerabilities and malicious behaviors, ensuring user data protection.
Monitored risk assessments, vulnerability assessments, and conducted periodic testing for applications, databases, operating systems, and network devices.
Secured websites and mobile applications using threat modeling, architectural review, and SDLC processes.

Application SecurityWeb Penetration TestingKubernetesDevOpsStatic and Dynamic Security AnalysisThreat Modeling+1

Security Analyst

Dec 2019 – Jan 2020 · 1 mo · Remote

Yeswehack

Security Researcher

Mar 2019 – Present · 7 yrs 1 mo · Paris, Île-de-France, France · Remote

🌟 Ranked among the top 500 security researchers globally by YesWeHack, with a passion for uncovering vulnerabilities and enhancing cybersecurity measures. 💻 Constantly driven to innovate and protect, I specialize in identifying and responsibly disclosing security flaws across a wide range of platforms and technologies.
🌟 Identified and reported multiple zero-day vulnerabilities in Android and web security, contributing to the enhancement of cybersecurity measures for leading organizations.
🌟 Conducted comprehensive research and analysis to uncover previously unknown security flaws, demonstrating a deep understanding of cybersecurity principles and techniques.
🌟 Developed proof-of-concept exploits to illustrate the potential impact of identified vulnerabilities, facilitating effective communication with stakeholders and driving timely remediation efforts.
🌟 Collaborated closely with cross-functional teams to ensure the successful resolution of reported security issues, fostering a culture of collaboration and continuous improvement.

Vulnerability IdentificationResearch and AnalysisProof-of-Concept DevelopmentPenetration TestingSecurity Research

Bugcrowd

Security Researcher

Sep 2018 – Present · 7 yrs 7 mos · Remote

Discovered and reported multiple zero-day vulnerabilities across Android and web applications, strengthening the security posture of top-tier organizations.
Performed in-depth research and analysis to identify critical security flaws, showcasing advanced knowledge of exploit development and cybersecurity methodologies.
Created proof-of-concept (PoC) exploits to demonstrate real-world impact, enabling clear communication with technical and non-technical stakeholders.
Partnered with cross-functional teams to drive effective remediation, contributing to a culture of proactive security and continuous improvement.

Vulnerability IdentificationResearch and AnalysisProof-of-Concept DevelopmentPenetration TestingSecurity Research