Company Description:

• Heading the application security team, imparting training, and supervising cybersecurity reviews, audits, and various evaluations, including static/dynamic assessments and vulnerability management.

• Building liaison with IT and security teams in developing & maintaining IT security policy development and performing system audits to ensure compliance

• Conducting exhaustive security architecture reviews and threat modelling for diverse financial sector applications

• Performing manual & automated penetration testing, including dynamic application assessments and source code reviews.

• Auditing SDLC for applications and partnered with clients for secure SDLC process

• Efficiently utilizing tools like Terrascan and yamllint for cloud security configuration reviews.

• Conducting vulnerability scans with AppScan, Nessus, Kali Linux tools, and Rapid7, analyzing results, and coordinating with the development team for remediation.

• Formulating and introducing security best practices, disaster recovery plans, risk assessments, and security policies across numerous IT projects.

• Analyzing and assisting with risks, remediation strategies, & security engineering analysis as per manual/tool-based findings