Vishwa Joshi

DevOps Manager

Bengaluru, Karnataka, India11 yrs 2 mos experience

Most Likely To SwitchHighly Stable

Key Highlights

Expert in Web Application and System Security.
Proven track record in Vulnerability Assessment and Penetration Testing.
Strong leadership in managing application security teams.

Stackforce AI infers this person is a Cybersecurity expert specializing in application security and vulnerability management.

Contact

Skills

Core Skills

Application SecurityVulnerability AssessmentSecurity AutomationMobile SecurityWeb Security

Other Skills

SecDevopsVulnerability ManagementApplication Security TestingAutomationContinuous DeploymentThreat ModelingPenetration TestingMobile Application Security TestingBug BountyWeb Application SecurityPCI ComplianceInformation SecurityPCI DSSSecurity TestingPerformance Testing

About

A workaholic techno enthusiast with good analytical skills deeply passionate about Information Security specially Web Application security, System security, Reverse Engineering,VA,Penetration Testing,SecDevops.

Experience

11 yrs 2 mos

Total Experience

2 yrs 4 mos

Average Tenure

8 yrs 1 mo

Current Experience

Chevron

Lead Penetration Tester

Sep 2025 – Present · 7 mos

Accenture

3 roles

Security Delivery Associate Manager

Dec 2021 – Present · 4 yrs 4 mos

Team Lead

Promoted

Jun 2019 – Dec 2021 · 2 yrs 6 mos

Technology Senior Security Analyst

Feb 2018 – May 2019 · 1 yr 3 mos

Intel corporation

Senior Security Engineer

Apr 2017 – Jan 2018 · 9 mos · Bengaluru Area, India

We45 solutions (india) pvt ltd

3 roles

Lead-Application Security

Promoted

Aug 2016 – Mar 2017 · 7 mos · Bengaluru Area, India

Part of we45 SecDevops Framework - Automated Test Suite integrated with Continuous Deployment of Products/Standalone.
Designing the threat models before starting the application penetration testing and these threat models were specifically targeted in achieving the high Risk vulnerabilities.
Good at identifying vulnerability and risk issues and thus taking up risk based testing.
Strong technical skills and project management skills in handling multiple Vulnerability Management projects.
Leading a team of Enthusiasts on application security testing and also part of the team in handling hundreds of clients and applications.

SecDevopsVulnerability ManagementApplication Security TestingApplication SecurityVulnerability Assessment

Senior Security Analyst

Promoted

Jul 2015 – May 2016 · 10 mos

Performing Android, iOS based mobile application security testing.
Active participant of the ‘Bug-bounty’ contests and was able to identify multiple vulnerabilities.
To perform VAPT on the enterprise infrastructure where the scope is PCI certified and to find the deep seated Kernel level vulnerabilities.
Some of the industry standard tools used during my career path:
1. Web Application security: Burp suite professional, NMAP, IBM Appscan, OWASP ZAP, fierce, Nikto, , Dirs3arch, Dirbuster, Netcat, SOAP, Wireshark, W3AF and custom Python scripts extensively for VAPT.
2. Infrastructure Security: Nessus Security Center, OpenVAS, Metasploit, Nexpose, Qualys Guard.
3. Mobile application security: Dex2Jar, Android studio, Quark, JD-GUI, Drozer, Classdump-Z, GDB, MOBSF
Middleware integration testing is performed as part of an integration project.

Mobile Application Security TestingVulnerability AssessmentBug BountyMobile Security

Security Analyst

Jul 2014 – Jun 2015 · 11 mos

Performing methodological Vulnerability Assessment and Penetration Testing specially in the domain of Web Applications.
Application security assessment and controls/recommendations provisioning to an application of PCI environment.
Utilizing the well known standards like OSSTMM, PTES and guidelines of the NIST-SP 800:115 followed in the industry for testing of the applications.
Proficient in identifying the vulnerabilities defined in the OWASP top 10 2013.

Vulnerability AssessmentWeb Application SecurityPCI ComplianceWeb Security