Gokul Marimuthu Email and Phone Number

• Application security assessment of numerous financial and non-financial web applications using Qualys Acunetix, Burp Professional, ZAP etc.• Security incident investigation and analysis for the application team.• Network Security assessments by using Nessus, Nmap etc. • Documentation and Review of various information security policies and procedures.• Provide support as SME to team for different security incidents.• Malware analysis and Reverse Engineering• Network Penetration Testing• Secure Configuration Audits• Firewall Rule Base Analysis• Monitor and analyse network traffic and security event data.• Investigate intrusion attempts and perform in-depth analysis of exploits.• Provide network intrusion detection expertise to support timely and effective decision making of when to declare an incident.• Conduct proactive threat and compromise research and analysis.• Review security events that are populated in a Security Information and Event Management (SIEM) system.• Analyse a variety of network and host-based security appliance logs (Firewalls, NIDS, HIDS, Sys Logs, etc.) to determine the correct remediation actions and escalation paths for each incident.• Worked on imperva web application firewall and customized rules based on customer use case • Conduct digital forensics and malware analysis triage analysis.• Independently follow procedures to contain, analyse, and eradicate malicious activity.• Document all activities during an incident and providing leadership with status updates during the life cycle of the incident

Software Security Assessment: Evaluate applications for appropriate and effective use of security controls using tools and techniques such as source code analysis, vulnerability scanners, and manual testing techniques.Application Security Control Development: Provide expert guidance to developers on the appropriate selection and implementation of relevant application security controls.Familiarity with common application security tools, experience working with common tools is ideal. (Fortify, AppScan, WebInspect etc.)Analyzing security responsibilities by ensuring education and compliance with security directives for employees with access to classified material