Ankit Joshi

DevOps Engineer

Delhi, India10 yrs 9 mos experience

Key Highlights

10+ years of experience in application security.
Expertise in security testing with various tools.
CEH Certified professional focused on API security.

Stackforce AI infers this person is a Cybersecurity expert specializing in application security and vulnerability management.

Contact

Skills

Core Skills

Application SecuritySecurity Testing

Other Skills

Automated Security TestingBurp SuiteClearQuestCloud SecurityCyber Security RiskCybersecurity Incident ResponseDASTEthical HackingFiddlerGoogle Cloud Platform (GCP)IBM appscanIT Security AssessmentsInformation SecurityJIRAManual Security Testing

About

CEH Certified, working as an Application Security Engineer. Have total experience of 10+ years with a good knowledge of STLC. Experienced in security testing with IBM AppScan Tool || Burp Suite || Fiddler || Chrome Dev Tool || Wireshark || Charles Proxy|| DAST || SAST || Threat Modelling|| API Security || Trust & Safety || OAuth Verification || Post Compliance Auditing || PCI-DSS

Experience

Lloyds technology centre india

Senior Security Engineer

Feb 2024 – Present · 2 yrs 1 mo · Hybrid

Atlassian

Product Security Engineer

Nov 2021 – Sep 2023 · 1 yr 10 mos · Bengaluru, Karnataka, India

Google

Cyber Security Analyst

Jul 2019 – Nov 2021 · 2 yrs 4 mos · Hyderabad, Telangana, India

Verifying applications that access Google APIs to prevent OAuth Abuse in GCP • Manual as well as automated security testing of applications (web based, thick client, web services) as per OWASP top 10 and Google Standards
Security Analysis: Approaches to identify Local vs Server storage of an application leveraging aspects of Network Data Analysis
Post Approval Audit: Perform Audit on approved apps for sensitive/restricted scopes verification compliance
Performing source code analysis/ review using Google tools. Reviewing the results and sharing the report as per the best practices and proposing the recommendations with the development team.
Worked on Wireshark, NetworkMiner: Network packet analyzer and forensic analysis, Fiddler: Web debugging tool

OAuth VerificationManual Security TestingAutomated Security TestingNetwork Data AnalysisSource Code AnalysisWireshark+4