RITESH GUPTA

DevOps Engineer

Noida, Uttar Pradesh, India4 yrs 9 mos experience

Key Highlights

4+ years of experience in Cyber Security.
Expertise in Mobile and Web Application Security Testing.
Proven track record in vulnerability assessment and penetration testing.

Stackforce AI infers this person is a Cybersecurity professional with expertise in application security and vulnerability assessment.

Contact

Skills

Core Skills

Mobile SecurityPenetration TestingWeb Application SecurityVulnerability AssessmentCybersecurity

Other Skills

API TestingAndroid Application SecurityApplication SecurityAutomated scanningBinary AnalysisBurp SuiteBurp Suite ProC++Cascading Style Sheets (CSS)CheckMarxCost-effective SolutionsCross-team CollaborationCryptAnalysisDASTEDR

About

Ritesh Gupta is a Cyber Security Professional with 4+ years of Industry experience. Area of expertise: • Web/Android Application Security Testing(DAST,SAST) • API Security Testing • Network Penetration Testing • Vulnerability Assessment & Penetration Testing • Endpoint Security Configuration Review • Cloud Security Certifications & Licenses: • CEH [Practical] • IBM-Information Security Mastery

Experience

4 yrs 9 mos

Total Experience

2 yrs 11 mos

Average Tenure

1 yr 10 mos

Current Experience

Ey

Senior Security Consultant

Jul 2024 – Present · 1 yr 10 mos · Noida, Uttar Pradesh, India · Hybrid

Experience in performing Mobile pentesting [DAST & SAST].
Expertise in Tools:
Reverse Engineering: apktool, ADB.
Binary Analysis and Instrumentation: jadx-GUI, Frida, Objection, Ghidra.
Experience in handling end to end task from communicating with clients, understand their business requirements till handling pentest deliverables.

Mobile pentestingDASTSASTReverse EngineeringBinary AnalysisInstrumentation+2

Cognizant

2 roles

Application Security Engineer

Aug 2021 – Jul 2024 · 2 yrs 11 mos

Expertise in Manual security testing and automated scanning [ DAST, SAST ]:
▪️Web Applications and Servers
▪️Web Services/APIs
▪️Android Applications
Tools utilized : Burp Suite Pro, Postman, CheckMarx, MobSF, Kali Linux
Identified and exploited High/Medium severity vulnerabilities such as but not limited to(SQL
Injection, XSS, IDOR, Broken Authentication/Authorization, Security Misconfiguration, CSRF,
Business logic error) contributed to a 95% enhancement in product security.
Expertise in creating strategic documentation and comprehensive vulnerability assessment reports with effective mitigations, based on the encountered vulnerabilities.
Exposure to:
▪️Endpoint security configuration review
▪️Red Team activities
▪️Cloud Security
Experience in mentoring new team members on security testing practices, proactively kept up to date with latest ethical hacking methods and tools, fostering a culture of continuous learning and improvement.

Manual security testingAutomated scanningBurp Suite ProPostmanCheckMarxMobSF+3

Security Tester (Intern)

Apr 2021 – Jul 2021 · 3 mos

Executed rigorous security assessments on servers & web based applications using open-source tools followed by manual penetration testing process using Burp Suite, Postman and OWASP ZAP adhering to OWASP Top 10 framework.
Demonstrated excellent technical writing skills by creating executive test strategy
documents and comprehensive security assessment reports with attention to details based
on the encountered vulnerabilities.

Security assessmentsBurp SuitePostmanOWASP ZAPWeb Application Security