Areas of responsibility:- Cyber Security - IAM, Security Monitoring & Platform security- IT Risk measurement and monitoring - IT security product development - IT risk control automation- 3rd party compliance and assurance- Team management and building communities - Scrum Master

Vulnerability Management:- Scope derivation of assets under CORM (Corporate Operational Risk Management) guidelines. - Defining target scope with auto scanning tools and performing manual verification of the Vulnerabilities Identified. - Documenting gathered findings, recommending corrective actions, performing risk assessment. - Communication with Customers/Stakeholders, supplying reports with identified risk.- Coordination with development/infrastructure/network teams for recommend actions.- Helping development, QA and other team members in security best practices.RBAC Consultancy: -Managing RBAC authorization process & implementation -Authorization review for multiple Platforms & Databases. -Expertise in RBAC, Identity & Access management tools -Script development to support process automation. Security Incident & Event Management(SIEM): -Requirement Analysis & Impact Assessment -Designed & Implemented monitoring for multiple Applications, Operating Systems, Databases & Network Devices: -Configuration & Change Management -Coordination with SIM&R(Security Incidence Management & Response) and G-CIRT (Global CIRT)

• Web Application Penetration Testing (OWASP top 10, OWASP Application Security Verification Standards).• Experience with auto scanning tools and manual verification of the Vulnerabilities Identified.• Performing risk assessment on vulnerability identified.• Worked with developers for recommendation, workaround & actions, fixes (Enterprise Security API’s - ESAPI).• Involved Developers, QA and other team members in security best practices.• Secure Web Application development in Java and PHP programming languages.• Designing application architecture and preparing application data flow diagrams (DFDs)• Designed the database of applications and prepared Entity Relationship Diagrams (ERDs)