Jun 2023 – Sep 2023 · 3 mos · Noida, Uttar Pradesh, India · Remote

• Managing SAST and DAST platforms using Microfocus Fortify and Fortify SSC
• Managing JFrog XRay’s Artifactory for SCA scanning
• Working with developers to fix the True Positive triaged vulnerabilities
• Managing Secure Coding Guidelines program to train developers using Security Champions Program

Nov 2021 – Jun 2023 · 1 yr 7 mos · Gurugram, Haryana, India · Hybrid

• Creating and Managing Application Security Program
• Secure Design Review or Secure Architecture Review or Threat Modelling
• SAST, Secure Code Review
• DAST, Penetration Testing
• Vulnerability Triage and Remediation
• Managing WAF (Imperva, CloudFlare) with Network Security Team
• Supporting Cloud Security related tasks
• Tools Used: Shiftleft, Invicti, Bright Security, Dazz, Wiz, Lacework, Phylum, BurpSuite, PlexTrac, Fortify

Jul 2021 – Nov 2021 · 4 mos · Noida, Uttar Pradesh, India · Remote

• Provide SME input for Application Security
• Planning and managing the delivery of Application Security tests (both automatic and manual), and source code reviews on web applications
• Formulating and implementing monitoring, policies, procedures, and standards relating to application security
• Responsible for managing or providing developer application security awareness
• and education
• Provide security remediation advice and training to technical personnel
• Work directly with internal business units to communicate risk and help resolve open vulnerabilities
• Track, report, and close software security workstreams using JIRA

Jul 2020 – Jul 2021 · 1 yr

• VA&PT of Web Applications and APIs, Dynamic Application Security Testing(DAST), Static Analysis Security Testing(SAST), Secure Code Review, Secure Coding Practices, HCL Appscan Enterprise and Standard, Burpsuite, Checkmarx, Kali Linux, Metasploit, nmap, sqlmap, Wireshark, Fiddler, Postman, Swagger, Insomnia

Jul 2018 – Jul 2020 · 2 yrs

Dec 2016 – Jul 2018 · 1 yr 7 mos

Jul 2016 – Dec 2016 · 5 mos

• Description: Item Response Theory (IRT) Engine, Virtual Chemistry Lab in Unity
• Role: Team Leader Responsibilities:
• I was assigned a couple of projects including creating Full Stack Applications with Front and Back End in it using JAVA MVC Framework, JS, Bootstrap, jQuery.
• Created IRT Engine, based on a statistical theory (Item Response Theory) to find ability of candidates writing exam, using R language to implement theory and plot various charts using Java Hibernate Framework and MVC structure for Web Application implementation.
• o It is the preferred method for developing scales in the US especially when optimal decisions are demanded, as in so-called high-stakes tests, e.g., GRE and GMAT
• Created Virtual Chemistry Lab to conduct Salt Analysis, using Maya to create objects, Unity to use those objects and setting up the lab and its interaction, Java to create automated program to conduct test cases, JUnit to create test cases of positive and negative tests