As a Product Security Lead Engineer, I am working on end to end security of Products which are being developed at xylem covering Threat Modelling, Risk planning and Management, Security Assessment, Remediation of vulnerabilities, Customer Security guidance documentation

Handling Application Security for Xylem products which includes Penetration Testing, Security Automation and Source Code Analysis

Continuous Software Security Assessment at EnecoProject involved in providing Security Assessment to web applications developed at Eneco. Security Assessment covers Vulnerability Assessment, Penetration Testing, Source code review and Integrating Security Automation in their build pipeline. Client : Eneco, Rotterdam, Netherlands Role Played : Security Consultant Skills Used : Vulnerability Assessment, Penetration Testing, Source Code Review Duration : 6 Months (3 months from onsite-Rotterdam and 3 months from Bangalore)ContributionsConducted Vulnerability Assessment and Penetration testing on their web applicationsConducted Source code review on their codebaseConducted Offensive Web Security Hackathon workshops to their development teamsConducted Defensive Security(Secure Coding Guidelines) to their development teamsImplemented Static Scan Automation in their build pipelineImplemented Dynamic Application scan Automation using Zap Proxy tool in their build pipelineContinuous Software Security Assessment at Yes TelecomProject involved in providing Security Assessment to YesTelecom web applications. Security Assessment covers Vulnerability Assessment, Penetration Testing, Source code review and Integrating Security Automation in their build pipeline. Client : YesTelecom Role Played : Security Consultant Skills Used : Vulnerability Assessment, Penetration Testing, Source Code Review ContributionsConducted Vulnerability Assessment and Penetration testing on their web applicationsConducted Source code review on their codebase using SonarqubeHave implemented custom rules specific to Conducted Offensive Web Security Hackathon workshops to their development teamsPlanning to conduct Defensive Security(Secure Coding) to their development teamsPlanning to implement Static Scan Automation in their build pipelinePlanning to Implement Dynamic Application Scan Automation using Zap Proxy tool

Web Application Penetration Testing and Vulnerability Assessment

Worked as an effective Web Application Vulnerability Analyst and providing fix to the identified issues in online Banking site