Aug 2022 – Jun 2023 · 10 mos · Bengaluru, Karnataka, India · On-site

Jan 2022 – Aug 2022 · 7 mos

Jan 2021 – Mar 2021 · 2 mos · Hyderabad, Telangana, India · Remote

• Helped the developer team to Implement a P&P Notification engine that recognises the user and system-level events/processes. The engine notifies the customer via web push alerts and emails. The engine was incorporated into Amazon's platform for security and certificates.

Aug 2018 – Jul 2020 · 1 yr 11 mos · Mumbai, Maharashtra, India · On-site

• ➤ Perform malware replication and analyze the malware behavior to develop algorithms for behavioral detection.
• ➤ Perform static analysis to develop heuristics based on static properties.
• ➤ Perform false positives analysis and develop solutions to resolve them.
• ➤ Perform dynamic malware analysis and static analysis wherever necessary.
• ➤ Monitor the threat landscape, assess new dangers, identify TTP, and create signatures for detection and prevention.
• ➤ Analyze vulnerabilities and create protection against known exploits and zero-day attacks
• ➤ Performed QA and improved upon existing protection.
• ➤ Create automation to help with initiatives involving research and analysis.
• ➤ Reverse engineering vulnerabilities in open-source software and security testing (black, grey, or white box, depending on the project).
• ➤ Evaluate security-related source code, primarily in C/C++.
• ➤ Create security evaluation methods and proofs of concepts for the vulnerabilities found.
• ➤ Create concise vulnerability reports and advise development teams on how to address security issues.
• ➤ Documentation of information and conclusions that development teams can utilize as guidelines, checklists, and examples.
• ➤ Helped technical writers to write articles and blogs about security and threat assessments.

Jun 2017 – Jul 2018 · 1 yr 1 mo · Mumbai, Maharashtra, India · On-site

• ➤Perform analysis of network security needs and contribute to design integration and installation of hardware and software.
• ➤ Define specific network security infrastructure (Firewalls, IDS/IPS NDR, NAC, etc.) requirements to comply with internal policies and regulatory requirements.
• ➤ Define network security configuration templates and baselines (routers, switches, firewalls)
• ➤ Provides technical security consultation and direction for infrastructure architecture and system team.
• ➤ Support vulnerability assessments and security testing and work with operations teams on remediation.
• ➤ Evaluate systems to verify system security settings and configurations.
• ➤ Maintain and update relevant system and process documentation and develop ad-hoc reports.
• ➤ Implementation and maintenance of security devices.
• ➤ Provide and maintain configuration standards for the infrastructure.
• ➤ Research, document, and solve complex security problems.
• ➤ Provide support for audits involving security controls to deliver evidence of network security processes and controls.

Feb 2015 – Apr 2016 · 1 yr 2 mos · Varanasi, Uttar Pradesh, India · On-site

• Project: Crime and Criminal Tracking Network & Systems (CCTNS)