Subdomain Monitoring Code Scanner This is a service that monitors for common security vulnerabilities across twitter subdomains in an automated fashion.Often we get attackers who are able to perform malicious activities on a subdomain of twitter.com, and we often get hacker-one reports about them. There are known vulnerabilities which can be easily automated and hence, improve the company security hygiene. The goal of the system is to find those issues using different available security scanners.This system will have the ability to incorporate different scanning engines that can be configured to be used depending on the needs. The tool gathers the attack surface of twitter.com and its subdomains. Runs security scanner scripts that find specific vulnerabilities and finally reports the results into the dynamic analysis dashboard. The results in the dashboard can then be one-click triaged to JIRA. Subdomain Inventory FrameworkSince every time we get a HACKER ONE report we need to find information about the subdomain that was attacked, the platform will have the ability provide one single point of lookup. The purpose is to develop a platform wherein information can not only be viewed but also updated for future references as well. For this purpose, I created a subdomain inventory builder which collects the information in an automated manner and the Subdomain Inventory Dashboard which is the platform security's centralized dashboard for displaying information about the subdomains of twitter.com. The dashboard provides the ability to search and update information about the subdomains.

Cloud Infrastructure Security Unit•Developed a custom ICF (Identity Connector Framework) connector with RSA Archer to automate the identity lifecycle and user access management providing end to end functionalities with OIM.•Collaborated on a team to install, customize and configure out-of-the box connector for multiple technologies with OIM, fulfilling the business requirements to enforce policy compliance with complete identity control.•Built a custom synchronization of the service Id owners for specific applications with OIA using IBATIS framework, thereby reducing operational costs and providing better control over user access privileges.•Performed UI customization in OIM using the ADF framework like adding a custom button that pre-populates the value for specific fields on the user profile of the request form and displaying custom attribute (Job Code) in the user form.•Improvised a custom Java based utility using OIM APIs to create, configure and trigger multiple Schedule Jobs through a single custom job and create hundreds of IT resource instances in OIM with password update ability.

Demonstrated that the existing security model of the Cloud stack API was vulnerable to DDOS (Distributed Denial of Service). Proposed a new model using IP filtering by detecting and blocking the IP packets involved in DDOS attacks.

Updated channel information on their android application daily. Formulated creative online polls and quizzes for engagement of the users. Promoted the company on social media in a strategic manner gathering bigger user base.

Designed a user interface for the company’s in house web browser supporting their mail system using java applets and web service calls. Implemented a system for mapping data into XML and achieved significant standardization and simplification of procedures.