Cyril James Email and Phone Number

▪ Responsible for end to end execution of testing projects – project initiation, project planning, scoping, execution and reporting▪ Penetration testing of network, web and mobile applications using automated and manual exploitation techniques▪ Wireless penetration testing, configuration reviews and network architecture reviews▪ Perform social engineering attacks like phishing, vishing, baiting, tailgating and other social engineering techniques to test overall security aspects of organisations and to raise awareness▪ Preparing technical report which includes executive summary, technical findings, details of system/application vulnerabilities and compromises, and the possible remediation strategies.

▪ Responsible for overall execution of network and application security testing projects by understanding client needs, studying the application environment and architecture, performing VAPT (vulnerability assessment and penetration testing) of network, web and mobile applications, web services security testing and providing remediation plan based on findings.▪ Generated and presented reports on security vulnerabilities to both internal and external customers▪ Managed RFPs responses, prepared effort estimation and presenting capabilities for new service offerings▪ Managed a team, mentored juniors and conducted training

▪ Conducted vulnerability assessment and penetration testing (VAPT) of network, firewall, web and mobile applications with focus on manual exploitation▪ Application security assessment, infrastructure audit, network configuration and architecture review of a telecom giant; also, carrying out security review of VAS (value-added services) applications▪ Wireless penetration testing and source code review▪ Contributed to business proposals, effort estimation, project plans, and presented service offerings to clients▪ Prepared reports containing recommendations on how to address identified vulnerabilities in order to improve the security posture

▪ Managed, operated, and analysed data from corporate security systems including McAfee IDS, Sourcefire IDS, Cisco MARS, Imperva, Redseal, Sentrigo Hedgehog and DLP Vontu▪ Monitored live systems to discover real-time threats▪ Conducted vulnerability assessment and penetration testing of network devices and infrastructure systems▪ Configured networking devices like Routers, Switches, Firewalls, TACACS, and VPN ▪ Setup and configuration of IP phones like Cisco and Nortel