• Increased vulnerability detection by 30% for Fortune 500 clients (eg, Microsoft, DHL, HCL) through optimized tools and checklists, strengthening business relationships and customer satisfaction.• Boosted team productivity by 20% by automating the custom security checklist, which included client-approved testcases missed by known scanners, cutting down manual review time.• Secured business for our team by helping another team address Microsoft S360 security alerts, which extended their client contract and created ongoing revenue for both teams.• Developed a tool with my team that automated 90% of the Xbox team's feedback evaluation using Azure AI. This saved Microsoft costs and led to a lasting maintenance partnership with us.• Improved operational efficiency, security, and stakeholder trust by making internal Microsoft solutions compliant with Microsoft's One Compliance System (1CS) review.• Collaborated with developers to identify and remediate vulnerabilities like SQL injection, XSS, CSV Injection, Missing Security Headers and Broken Access Control.• Lowered overall development costs by performing threat modeling of applications based on STRIDE model early in the SDLC to identify and mitigate risks.• Enabled timely release of application by implementation of cookie consent for major customer to comply with GDPR.• Performed SAST on project with 5M lines of code, uncovering over 30 security vulnerabilities within a month, bolstering system security and safeguarding against potential breaches.• Non-Tech resp: Facilitating communication with app owners, managing and delegating tasks to juniors, creating detailed reports, assisting with queries, and resolving internal disputes.

• Researched and mastered VAPT, DAST, and SAST while streamlining the learning process for newcomers with tailored training resources.• Conducted user awareness training by developing a comprehensive setup from scratch on social engineering attacks, including spear phishing, bulk phishing, and two-factor authentication bypass phishing attacks.• Performed pentest on multiple projects as a shadow resource to gain hands-on experience.• Got exposure to compliance guidelines like GDPR, PCI DSS, HIPPA, Data Privacy Compliance.