Ravinder Verma

Security Consultant

Haryana, India11 yrs 1 mo experience

Most Likely To SwitchHighly Stable

Key Highlights

Over 10 years of experience in information security.
Expert in vulnerability assessment and penetration testing.
Strong understanding of security guidelines and frameworks.

Stackforce AI infers this person is a Cybersecurity Specialist with expertise in vulnerability assessment and penetration testing.

Contact

Skills

Core Skills

Vulnerability AssessmentPenetration Testing

Other Skills

Security testingWeb services testingMobile application testingConfiguration reviewSecurity AssessmentWeb Application Security AssessmentsMobile Application Security AssessmentsReverse EngineeringMalware AnalysisPythonCProgrammingISO 27001Enterprise Risk ManagementLinux

About

Self driven, self motivated and zealous individual having good technical and analytic skills. Having Good understanding of Information Security. ■ 10+ years of experience in Vulnerability Assessment and Penetration Testing for Web Applications, Network, Mobile applications, Wireless Networks and Web Services. ■ Good understanding of Security guidelines like OWASP Top 10, SANS Top 25 and Mobile Top 10. ■ Firm understanding of network and system architecture and analysis to include fundamentals of network routing & switching, vulnerability management, assessing network device configurations, and operating systems (Windows/*nix). ■ Proficient in testing and debugging the Client Server/ Thick Client Applications and Windows Application. ■ Conducted static and dynamic analysis for mobile application on android platform. ■ High degree of motivation with skills in research and vulnerability analysis. ■ Passion for keeping up to date with current & emerging attack techniques, vulnerabilities, and mitigation technologies and apply it in the field of information security through the practice of Penetration Testing.

Experience

11 yrs 1 mo

Total Experience

2 yrs 2 mos

Average Tenure

4 yrs 11 mos

Current Experience

Confidential

Lead Info Sec Consultant

Jul 2021 – Present · 4 yrs 11 mos · Gurugram, Haryana, India

Ibm

Security Consultant @ X-Force-Red

Dec 2017 – Jul 2021 · 3 yrs 7 mos · Gurgaon, India

Kpmg global services (kgs)

Senior Executive

Sep 2017 – Dec 2017 · 3 mos · Bangaon Area, India

Performing security testing of Web services, Mobile Application (iOS, Android), Configuration Review of Firewall and OSINT projects.

Security testingWeb services testingMobile application testingConfiguration reviewVulnerability AssessmentPenetration Testing

Kuwait finance house

Security Consultant

Aug 2016 – Sep 2017 · 1 yr 1 mo · Kuwait

Vulnerability Assessment and Penetration Testing
Configuration Review and Hardening of Security Devices
Web Services Testing (SOAP)
Security Assessment of Core Banking Applications
ATM Testing
PCI DSS gap analysis

Vulnerability AssessmentPenetration TestingConfiguration ReviewSecurity Assessment

Protiviti

Associate Consultant

Aug 2015 – Aug 2016 · 1 yr · Kuwait

Vulnerability Assessment and Penetration Testing (Black Box and Grey Box)
Web Application Security Assessments
Wireless Penetration tests
Mobile Application Security Assessments (Android,iOS)
Thick Client Application testing (Executables,java apps etc.)
Web Services Testing (SOAP)
Configuration Reviews (Network devices, Application and Web Servers, Databases and OS)
Firewall security configuration hardening
Articulate findings of the various penetration tests to the Executives and Technical Staff

Vulnerability AssessmentPenetration TestingWeb Application Security AssessmentsMobile Application Security Assessments

Securityxploded

Student

Aug 2014 – Feb 2015 · 6 mos · banglore ,india

Learning the basic of Reverse Engineering and Malware analysis, python.Having the good basic knowledge of Buffer Overflow ,SEH,PE file and Static as well as Dynamic behaviour of malwares.After that worked on dedicated project in which I analyse malware samples in respect of their Static , Dynamic Behaviour and also their reversing.

Reverse EngineeringMalware AnalysisPython

National informatics center

Intern

May 2014 – Jul 2014 · 2 mos · New Delhi Area, India

Work on Project title "Web Application Security Assessment and Audit". Aim to find out vulnerabilities and try to mitigate also.I used various tools like Acunetix, Burp Suite for finding vulnerabilities & test beds like DVWA and Mutillidae for exploiting the vulnerabilities listed by OWASP.