 Maintaining security of products, periodically scanning and coordinating with stakeholders. On receiving alerts, take action on SAST, DAST, SCA dashboard findings in DevSecOps pipeline. Conducted Vulnerability Assessment of Web Applications, red teaming. Identifying the Critical, High, Medium, Low Vulnerabilities based on OWASP Top-10. Used DAST (Invicti, Burp-Suite) and SAST (SonarQube) followed White-Hat. Implementing end-end security for migrating web-apps to AWS AWS IAM to control access to AWS resources Enable AWS CloudTrail to log all API activity across AWS services. Enable AWS GuardDuty to detect potential security threats in AWS. Created Customer Managed keys in AWS KMS for data integrity across resources. writing Terraform files for creating resources in cloud

 Maintaining security of products, periodically scanning and coordinating with stakeholders. Part of team involved in establishing Security Centre Conducted Web-Application Penetration testing of 60+ applications. On receiving alerts , take action on SAST, DAST, SCA dashboard findings in DevSecOps pipeline. Conducted Vulnerability Assessment of Web Applications, red teaming. Identifying the Critical, High, Medium, Low Vulnerabilities based on OWASP Top-10. Communicate technical vulnerabilities and remediation steps to developers and stakeholders Used DAST (Burp-Suite, Acunetix, Netsparker) and SAST (SonarQube) followed White-Hat. Identify API vulnerabilities like Broken-Authorization, Mass-Assignment, SSRF, SQL Injection. Identify SOAP based API Security Vulnerabilities like SQLi, Command Injection, XML Injection, SOAP Action Spoofing, Broken Access and Authorization. Implementing end-end security for migrating web-apps to AWS SG, NACL, Data Encryption, Application Security, Monitoring, Logging and Incident Response. writing Terraform files for creating resources in cloud