• 12+ Years into Information Security domain• Overseeing product security release cycle• Manage vulnerabilities originating from multiple sources• Conducting manual security assessment for products, including but not limited to its web, deployment base, architecture components• Container Security, Threat modeling, Software Composition Analysis, Vulnerability Management• Supervise external security assessments• Supervise/Mentor dev team on implementing security in DevOps pipeline• Lead/Mentor team members and Projects• Engage in SOC2, FedRamp, ISO27001, UL2900 frameworks• Review customer security escalations• Conducted security awareness training for developers• Coordinate with developers on bug validation and patch verification• Executed threat intel and support various due diligence projects• Social engineering, red team infra setup• Conducted PCI segmentation testing, ASV scans, PCI security pentest• Have led custom C&C implant development project• Executed cloud security projects(AWS)• Hardened various assets including but not limited to OS, DB, AppServer, Firewall, Switches, etc. adhered with CIS, NIST,STIG standards• Review OWASP/CWE/SANS controls and incorporate into existing checklist• Experienced with multiple security tools like Core Impact, Burp Suite, Acunetix, Web Inspect, Fortify, Blackduck, Aquasec, Nessus, aws Inspector, etc• Vendor Evaluation