Conducted open security testing standards and projects, including OWASP secure coding practices and Top Ten testing framework, FISMA, NIST, OWASPExecuted daily vulnerability assessments, threat assessment, mitigation and reporting activities in order to safeguard information assets and ensure protection has been put in place on the systemsFound common web site security issues (XSS, CSRF, session fixation, SQL injection, information leakage, application logic etc.) across various platformsDeveloped custom scripts, used automated tools for exploiting vulnerabilities and formal tests on web-based applications on a regular basisDirected research pertaining to the latest vulnerabilities, tools and the latest technological advances in combating unauthorized access to informationProvided technical review and testing of new technologies such as Enterprise security applications/devices, appliances, mobile devices, mobile applications, etc.Supported Information Assurance asset deployments, upgrades, and maintenance; including servers, databases, network assets and wireless LAN securityExhibited client facing skills and capability to articulate technical concepts to a variety of technical and non-technical audiencesWorked independently and within a team environment Perform attack simulations on company systems and web applications to determine and exploit security flawsHandle flows from “Black box” to “Grey box” to “White box” testing according to clients’ needs Test form factors and technologies based on scopes of workPerform application and infrastructure penetration tests along with physical security reviewsDefine requirements for information security solutions and perform reviews of application designs and source code design, develop and implement penetration tools and tests and also use existing ones to handle penetration testing activitiesWork on improvements for security services and provide feedback and verification about existing security issues