Oct 2024 – Present · 1 yr 8 mos · Noida, Uttar Pradesh, India · On-site

• As a Cybersecurity Consultant, I specialize in end-to-end security solutions with a strong focus on compliance and secure application development practices. My core responsibilities include:
• Compliance Implementation: Driving organizational adherence to regulatory standards and security frameworks (e.g., ISO 27001, NIST, GDPR) by developing and enforcing security policies, controls, and governance structures.
• OWASP Standards Enforcement: Ensuring secure SDLC practices by implementing OWASP Top 10 and ASVS guidelines across web and mobile application development pipelines. Conducting security assessments and recommending remediation plans to developers.
• Vulnerability Assessment & Penetration Testing (VAPT): Conducting full-cycle VAPT engagements—including scoping, threat modeling, vulnerability scanning, manual testing, exploitation, reporting, and post-remediation verification.
• Risk assessments for new systems and applications, reviewing
• End-to-End Security Solutions: Delivering tailored security solutions including IAM design, endpoint security hardening, network segmentation, and cloud security configuration.
• Cross-Functional Collaboration: Working closely with development, IT, and business teams to integrate security across all layers of infrastructure and operations
• Security Awareness & Training: Promoting a security-first culture through tailored awareness programs, secure coding workshops, and continuous training.
• Key Tools & Technologies: Burp Suite, Nessus, OWASP ZAP, Nmap, Metasploit, Wireshark,, and CI/CD security integration