Diti Patel Email & Phone Number

Charlotte, Nc, Us

Gujarat, India

- Conducted regular Vulnerability Assessments and Penetration Testing (VAPT) for web and mobile applications using both black-box and white-box methodologies, in line with OWASP Top 10 guidelines.- Identified and mitigated critical vulnerabilities such as SQL Injection, Cross-Site Scripting (XSS), Privilege Escalation, Security Misconfiguration, Session Fixation, and Broken Access Control.- Proficient in cybersecurity tools such as Burp Suite, Nessus, Metasploit, Nikto, SQLmap, OWASP ZAP, Nmap, and various Kali Linux tools.- Conducted Vulnerability Assessment and Penetration Testing (VAPT) for infrastructure components, including firewalls, routers, switches, servers, and network devices, identifying potential vulnerabilities and security gaps.- Performed in-depth security assessments to uncover weaknesses in network configurations and access controls, ensuring adherence to industry security standards.- Performed in-depth security assessments to uncover weaknesses in network configurations and access controls, ensuring adherence to industry security standards.- Collaborated with teams to remediate identified vulnerabilities by recommending and implementing security patches, configuration changes, and best practices.- Generated detailed VAPT audit reports, highlighting risks, providing actionable insights, and recommending security enhancements to reduce potential attack surfaces.- Improved overall infrastructure security by identifying misconfigurations, performing simulated attacks, and ensuring compliance with security baselines.- Adhered to industry standards including Center for Internet Security (CIS) Benchmarks, ISO 27001, NIST, OWASP, and MITRE Framework.- Contributed to the team that facilitated the company’s certification from the Indian Computer Emergency Response Team (CERT-IN) and ISO 27001. - Lead a team in conducting onsite audits for clients, coordinating comprehensive security assessments for large clients with multiple locations.

Gujarat, India

- Managed the patching process for critical systems, including servers, routers, firewalls, and other network infrastructure to ensure they were up-to-date with the latest security patches.- Conducted firewall or network devices rule reviews and optimizations, ensuring that only required traffic was permitted, significantly reducing the risk of unauthorized access.- Performed regular vulnerability scans to identify outdated software and applied patches to mitigate security risks, reducing the attack surface across the organization's IT environment.- Implemented baseline configurations and security hardening measures for systems, servers, firewalls, routers, and switches, utilizing industry-standard security settings based on CIS Benchmarks and NIST guidelines.- Performed ISO 27001 information security audits for financial sectors and Technology Service Providers, ensuring compliance with international security standards.- Performed real-time assessments of banking networks, applications, and servers to identify vulnerabilities and optimize security configurations.

Master Of Technology - Mtech, Cyber Security

Bachelor Of Engineering - Be, Computer Engineering