Apr 2021 – Aug 2021 · 4 mos · Gurugram, Haryana, India

Apr 2019 – Apr 2021 · 2 yrs · Gurugram, Haryana, India

• Performing Security Automation in Software Development Lifecycle
• Secure Code Review across the entire product line to mitigate vulnerabilities in Code
• Deployed,maintained cloud infra using AWS, GCP ,Kubernetes, GitLab CI/CD
• API Development using Django to deploy & manage security services
• Solid experience with tools such as Git, SonarQube, Burp Suite, Security Frameworks
• Handling of Web Application Firewall (WAF) to mitigate large volumes of Attack Traffics
• Bot Management to mitigate Bot traffic on large scale to intelligently mitigate bots
• Vulnerability Assessment & Penetration Testing entire Product Line
• Security Incident Management-CloudTrail, GuardDuty, PagerDuty, Internal Security Services

Sep 2018 – Apr 2019 · 7 mos · Noida, Uttar Pradesh, India

• Implementation of Critical Security Controls on Web APIs.
• Performing Application Security Assessments for core payment applications
• Performing Mobile Security Assessments , Android / iOS and API Security
• Monitoring Data Leakage Protection (DLP), AntiVirus (AV) alerts, driving actionable alerts to closure
• Development of internal security services application in Django , PHP
• Performing Source Code Reviews for critical payments repositories
• Vulnerability Management using tools such as Nessus, Qualys
• Validation,Triage of security issues received from third parties and vulnerability disclosure program
• Conducting Secure Developer Training Programs

Feb 2017 – Sep 2018 · 1 yr 7 mos · Noida, Uttar Pradesh, India

• Implementation of Critical Security Controls on Web APIs.
• Application Security and it's various aspects
• Mobile Security -- Android / iOS and API Security
• Handling Bug Bounty Program and Security Issues received by external researchers
• Vulnerability Assessment & Penetration Testing of Infrastructure (Physical and Cloud AWS)
• DevSecOps -- Development of internal tools for enhancement of security controls
• Application Security Audits and compliance requirements such as PCI DSS
• Providing Application Security Trainings to developers across the organisation.
• Supporting with DLP and AV Requirements.
• SIEM and Firewalls
• Incident Response