AboutCybersecurity professional with over 2.6 years of experience specializing in secure software development, vulnerability management, and threat mitigation. I have a proven track record of improving product security by 25% and reducing risk exposure by 30% through effective security initiatives. My experience spans various domains, where I've successfully driven compliance with industry standards and implemented robust risk mitigation strategies. I thrive in collaborative environments and am dedicated to contributing to secure product development in future cybersecurity roles.I have extensive experience in managing environmental scoring using tools like Black Duck Hub to address open-source vulnerabilities, ensuring comprehensive coverage across all security aspects of product development. I also have hands-on expertise in penetration testing, identifying vulnerabilities, and implementing remediation strategies that ensure 100% adherence to security protocols and standards.Beyond vulnerability management, I have contributed to secure software development by implementing critical security features such as Control Flow Guard (CFG) and DLL hijacking protections, significantly improving system integrity. I’ve also played a key role in threat modeling and designing security strategies that protect products from potential exploit attempts.In addition to my technical skills, I actively engage in Agile and Scrum methodologies, utilizing tools such as Jira to track daily progress, manage sprint planning, and ensure the successful execution of security initiatives.Career HighlightsSpearheaded security efforts for two major product releases and 10+ critical patches at Honeywell, resulting in a 25% improvement in overall product security.Directed penetration testing initiatives and collaborated with teams to ensure 100% adherence to security standards.Managed environmental scoring using Black Duck Hub, achieving a 30% reduction in risk exposure across multiple product releases.Areas of ExpertiseSecure Software DevelopmentThreat Modeling & Risk MitigationVulnerability Management & RemediationWeb Application SecurityPenetration Testing Compliance: PCI DSS, NIST, CISTechnical SkillsProgramming Languages: C#, Java, SQLOperating Systems: LinuxSecurity tools: SD Element, Nessus, OpenVAS, Nmap, OWASP ZAP, BurpsuiteCertifications(ISC)² Security Compass - Software Security Practitioner (Architect) (Issued: May 2023)NPCI Cybersecurity Virtual Internship (Issued: September 2024)Udemy Advanced CyberSecurity - Logix Academy (Issued: September 2023)