Harsh Yadav

DevOps Engineer

Bengaluru, Karnataka, India10 yrs 9 mos experience

Most Likely To SwitchHighly Stable

Key Highlights

Expert in Vulnerability Assessment and Penetration Testing
Certified ISO 27001 Lead Auditor
Strong background in Information Security Governance

Stackforce AI infers this person is a Cybersecurity Specialist with expertise in Risk Management and Compliance.

Contact

Skills

Core Skills

Vulnerability AssessmentPenetration TestingInformation Systems Security AuditsInformation Security ReviewRisk AssessmentsPci-dss Gap Assessment

Other Skills

Web Application Security AssessmentsMobile Application Security AssessmentsConfiguration ReviewsDevSecOpsFirewall security configuration hardeningISO 27001 ISMS implementationsTelecom SecurityCyber Maturity AssessmentsCyber Security Readiness AssessmentsISO 27001PCI DSSHIPAASSAE 16SOXOSSEC implementation

About

Information Security Professional in the field of Information Security, Risk Assessment & Management, Information Security Audits. Expertise in Application Security, Network Security, DevSecOps, Vulnerability Assessment and Penetration Testing, Configuration Review, Network Architecture Reviews, Cyber Maturity Assessments, Cyber Security Readiness Assessments, Cyber Security Assessments. He has keen interest in Vulnerability Assessment and Penetration Testing, Information Security Governance, Networking, PCI-DSS, Risk Management, Business Continuity Planning and contingency planning. He is also certified ISO27001 Lead Auditor and hold CE|H certification from EC Council.

Experience

Ibm india software lab private limited

IBM Public Cloud - Red Team Tester

Jul 2019 – Present · 6 yrs 8 mos · Bengaluru Area, India · Hybrid

Vulnerability Assessment and Penetration Testing
Web Application Security Assessments
Mobile Application Security Assessments
Configuration Reviews (Network devices, Application and Web Servers, Databases and OS)
DevSecOps

Vulnerability AssessmentPenetration TestingWeb Application Security AssessmentsMobile Application Security AssessmentsConfiguration ReviewsDevSecOps

Kpmg india

2 roles

Consultant

Promoted

Apr 2018 – Jul 2019 · 1 yr 3 mos

Vulnerability Assessment and Penetration Testing
Web Application Security Assessments
Mobile Application Security Assessments
Configuration Reviews (Network devices, Application and Web Servers, Databases and OS)
Firewall security configuration hardening
Information Systems Security Audits
ISO 27001 ISMS implementations
RBI Guidlines

Vulnerability AssessmentPenetration TestingWeb Application Security AssessmentsMobile Application Security AssessmentsConfiguration ReviewsFirewall security configuration hardening+2

Associate Consultant

Apr 2016 – Mar 2018 · 1 yr 11 mos

Vulnerability Assessment and Penetration Testing
Web Application Security Assessments
Mobile Application Security Assessments (Android Application Security)
Configuration Reviews (Network devices, Application and Web Servers, Databases and OS)
Firewall security configuration hardening
Information Systems Security Audits
Also Telecom Security, Configuration Review, Network Architecture Reviews, Cyber Maturity Assessments, Cyber Security Readiness Assessments, Cyber Security Assessments

Vulnerability AssessmentPenetration TestingWeb Application Security AssessmentsMobile Application Security AssessmentsConfiguration ReviewsFirewall security configuration hardening+4

Infosys

Information Security Engineer

Jun 2015 – Apr 2016 · 10 mos · Bangalore Area, India

Information Security Review
Analyses of security metrics
Conduct engagement and platform level information security reviews and risk assessments against customer specific information security requirements and Infosys information security policies.
Implement and maintain Information Security standards such as ISO 27001, PCI DSS, HIPAA, SSAE 16, SOX etc. in organization level and engagement level.

Information Security ReviewRisk AssessmentsISO 27001PCI DSSHIPAASSAE 16+1

Panacea infosec (p) ltd

Intern

May 2014 – Jul 2014 · 2 mos · New Delhi Area, India

PCI-DSS gap assessment and Remediation:- Implementing OSSEC, Verifying the vulnerability assessment reports, Verify the patch level, Checking for change request methods, IP tables implementation

PCI-DSS gap assessmentOSSEC implementationVulnerability assessment verificationPatch level verificationChange request methods checkingIP tables implementation