- Conducted comprehensive vulnerability assessments and penetration testing (VAPT) targeting webapplications, Android/iOS apps, APIs, and network security.- Implemented and managed endpoint security solutions using AWS SecurityHub and Azure SecurityScore, Crowdstrike Falcon EDR, and Intune MDM solutions for device compliance- Developed an AWS security audit checklist and applied it to the organisation's environment forenhanced AWS security- Facilitated weekly security calls with stakeholders and subject matter experts to provide securityupdates- Prepared and distributed monthly and quarterly reports to teams and stakeholders, utilising anin-house risk register sheet- Utilised security tools such as Burp Suite, Nessus, Nmap, Invicti, Kali Linux OS, and project discoverytools for effective security measures.

- Proactively identified and resolved critical security issues, effectively safeguarding the Yatradomain from potential breaches.- Conducted comprehensive vulnerability assessments and penetration testing (VAPT) targeting webapplications, Android/iOS apps, APIs, and network security.- Successfully managed the Yatra bug bounty programmes, fostering collaboration with externalsecurity researchers.- Developed and presented monthly and quarterly security audit reports to management andstakeholders, providing valuable insights and recommendations.- Demonstrated expertise in verifying security measures across multiple client domains, ensuringrobust protection from potential threats.- Analyzed and evaluated audit reports from clients and vendors, implementing enhancements tostrengthen security processes.- Conducted social engineering and phishing activities on internal employees to fortify our owndomain security