Kabir ‎ Email & Phone Number

Bengaluru, Karnataka, India

• Prepared guidelines for developers and QA resulting in a 40% reduction in generic bugs.• Helping developers understand the security bugs and suggest appropriate fixes or mitigation according to scenarios.• Performing Pentest for internal and external applications and raising security concerns with the project team.• Conducted Pentesting, SAST & DAST scans, and performed secure coding, and code reviews.• Implemented CI/CD pipelines for security automation, streamlining setup processes• Communicating with the management regarding risks observed in the application and suggesting mitigations for same.• Utilize VMDR methodologies to proactively enhance the security of applications, ensuring comprehensive identification, assessment, and mitigation of potential vulnerabilities.• Conduct comprehensive assessments to identify vulnerabilities.• Collaborate with cross-functional teams for timely remediation.

• Conducted SAST scans with Snyk & DAST scans with BurpSuite Enterprise, and performed secure coding, code reviews, and penetration testing.• Implemented CI/CD pipelines for security automation, streamlining setup processes.• Played an active role in a responsible disclosure program, contributing to a more secure digital environment, and secured reported bugs within the company's recognition based initiative.• Engaged in exploit development and conducted CVE research to proactively identify and remediate vulnerabilities.• Managed and nurtured a vibrant cybersecurity community, guiding newcomers in Opensource and Cybersecurity.• Developed open-source projects for the community, fostering collaborative learning and contribution.• Developed a feature rich MERN stack website with blogs, feeds, and cybersecurity resources.• Collaborated with peers to elevate cybersecurity awareness and facilitate knowledge sharing.• Organized and hosted CTF events, and constructed practical CTF vulnerable machines.• Achieved a consistent monthly influx of 10k+ unique visitors to the community website.