Nimish Verma

DevOps Engineer

Bengaluru, Karnataka, India13 yrs 10 mos experience

Most Likely To SwitchHighly Stable

Key Highlights

Over 12 years of experience in Information Security.
Expertise in Penetration Testing and Vulnerability Management.
Identified multiple CVEs enhancing security protocols.

Stackforce AI infers this person is a seasoned Information Security professional with a focus on Penetration Testing and Vulnerability Management.

Contact

Skills

Core Skills

Application SecurityCloud SecurityPenetration TestingRisk ManagementVulnerability Management

Other Skills

Application Security ArchitecturePentestReportingThreat ProfilingThreat ModelingTechnical Security ReviewsSecurity TrainingNetwork Security TestingWeb Application Security AssessmentSecurity ResearchAWS Securitysource code reviewNetwork SecurityInformation SecurityWindows Server

About

Information Security Researcher with 12+ Years of experience in Penetration Testing, currently working in Intel Pentest Task Force Team. Possess skills in Web, Infra, Cloud - Assessments, Static, Dynamic Analysis, Driver Analysis, Vulnerability Management, OS Hardening, Risk Assessment, Source Code Analysis. Have done PG Diploma in IT Infra Systems & Security from C-DAC-R&D Division under Govt of India, B-Tech in Information Technology. Identified multiple CVE's.

Experience

13 yrs 10 mos

Total Experience

3 yrs 5 mos

Average Tenure

7 yrs 6 mos

Current Experience

Intel corporation

Security Researcher

Nov 2018 – Present · 7 yrs 6 mos

Application Security ArchitectureCloud SecurityApplication Security

Kpmg

Senior

Jan 2015 – Nov 2018 · 3 yrs 10 mos

Assessing threats and vulnerabilities through penetration testing, web application security assessments, social engineering, technical security diagnostic reviews, network architecture reviews and gap assessments.
End to end security solutions, right from assessing an application, threat profiling, executing and providing mitigations for found vulnerabilities.
Generate and present executive as well as technical reports on security vulnerabilities to the customers.
OS Hardening.
Performing security configuration review for devices.
Performing Vulnerability Management for one of the largest retail client in US, including scanning, reporting vulnerabilities to concerned teams, follow-up on remediation. Providing insight on patches required for fixing vulnerabilities to the teams.
Running Phishing simulations.

PentestRisk ManagementPenetration Testing

Fujitsu consulting india

Technical Consultant

Sep 2012 – Oct 2014 · 2 yrs 1 mo

Experience in monitoring and mitigating Infrastructure security threats and attacks.
Proactively responding to alerts generated by Arcsight, Splunk, analyze infected system and mitigate attack.
Analyzing Sourcefire NIDS alerts, MCAfee Proxy logs.
Scanning quarantine mails for malicious content.
DLP Incident Review.
Vulnerability Management using Tenable Security Centre and Qualys Guard.
Working with various security teams spanning across the globe.