Dev Security Engineer for XL Release, XL Deploy and Integrations- Build product to automate software release processes and setup continuous delivery pipelines- Set up processes and tools for security testing- Improve procedures around secure application development and CI/CD practices- Execute Penetration Tests for XebiaLabs Products and provide remediations- Raise awareness about security throughout the organisation- Participate in pre-sales security reviews

Senior Software Developer in the DevOps team of private banking client- Involved in design, development, deployment of the private banking customer portal- Involved in development of asynronous alerting system- Participated in activities to migrate BackBase used as Digital Banking Platform- Involved in web application security and provided remediation for reported vulnerabilities- Participated in activities to setup Jenkins pipelinesTools & Technology : JAVA/J2EE, Angular JS, HTML5, Bootstrap, Web Services, Maven, Jenkins, uDeploy, Oracle PL/SQL, Bitbucket, Junit, Jenkins, SonarQube, HP Fortify, Backbase

IT Analyst in TCS Software Security CoE Team- Involved in design, development, testing and deployment of new software security assurance portal- Involved in Best Ethical Hacker Contest Application Development and Assessment- Performed peer application security reviews for other projects- Involved in creating knowledge base for web application security- Performed vulnerability assessments and provided remediations for raised application security risks and guided development teams to mitigate vulnerabilities through application security best practices- Conducted trainings for development teams on topics like OWASP Top 10, Database Security, Cryptography, Secure Programming Best Practices etc

Technical lead for Global Employee Self Service Revamp- Defined technologies for the revamp- Defined coding standards- Designed common framework for all Global ESS Modules- Designed and developed REST APIs- Involved in defining security standards

Technical lead for removal of IBM WebSphere Process Server and Implementation of alternate solution to handle workflow which is fast, secure and reliable - Designed a solution for WebSphere Process Server Removal - Involved in Redis server configuration related activities - Implemented APIs to perform Redis Operations - Involved in web application security and provided remediation for reported vulnerabilities - Involved in implementation of non-functional requirement

Developer and Technical Lead for Global Employee Self Services Menu Revamp- Involved in design activities for new Menu Approach and high availability of Home Page- Involved in Server Configuration related activities- Implemented APIs for Role Based Menu Structure- Involved in web application security testing and provided remediation for found vulnerabilities- Implemented Non Functional Requirements

J2EE Web application developer for Vendor Invoicing Module- Involved in Database Design activities- Involved in various POCs (Proof of concepts) to integrate two different systems – Vendor Management System and Ultimatix – Global Employee Self Services- Provided Remediation for Fortify and Webinspect Reported Vulnerabilities- Involved in Server Configuration related activities - Implemented Non Functional Requirements- Implemented web application using JSF Framework, an MVC pattern - based framework to design Backing Beans, Delegate, Façade, Session Bean and related configuration for each use-case

J2EE Web application developer for Global Employee Self Services- Applied JSF Framework, an MVC pattern - based framework to design Backing Beans, Delegate, Facade, Session Bean and related configuration for each use-case - Involved in writing configuring file (faces-config.xml) - Developed JSPs as server side programming for dynamically generating HTML pages - Involved in writing Helper, Backing Bean, DAO and Service classes