● Adding Security tools to Pipeline and performing SCA, SAST, DAST and Image Scanning.● VAPT for Web Application, Mobile Application and API(s) and suggesting remediation to Developers & Clients● Threat Modeling for any significant changes occurs in application and reporting it.● Actively doing secure code review before every release.● Implemented tools for secure code such as● Deployed Secure Development pipeline in Jenkins as well as in AWS CodePipeline.● Worked on principles of least privilege, access appropriate to role, and Role Based Access Control.● Hardening of Infrastructure Security.● Experience with common information security management and control frameworks ISO-27001, PCI-DSS and SOC2.● Lead and participated in Security Reviews, Audits, Risk Assessments, Vulnerability Assessments.● Experience in the introduction of Infrastructure-as-Code (IaC) and Policy-as-Code (PaC).● Hands-On with endpoint security tool Okta.● Protected internal application by implementing authentication and Firewall protection through Cloudflare (ZeroTrust Networks)

Performed VAPT for web application, mobile appsand printer apps of different reputed clients.Performed risk and vulnerability assessments andprovided results and recommendations to seniormanagement.Lead project where Team create SIEM solutionfrom scratch all from open source technologyusing ELK.Conducted security audits to identifyvulnerabilities.Cyber Security Awareness among theorganization.Have hands on experience in IDS/IPS securityOnion