Jagan S Email and Phone Number

• Led application security team to debug web-application by performing static & dynamic scanning through SAST/DAST tools like Checkmarx, Burp Suite, OWASP ZAP and prioritized 50+ vulnerabilities according to exploitability and impact.• Documented critical issues like XSS, SQL Injections, XXE, CSRF and others listed under OWASP Top10 and SANS Top25.• Performed source code reviews to eliminate Injections, XXE, CSRF, and session management vulnerabilities. Documented best practices to produce best practices review sheets for developers for Secure SDLC.• Performed threat modeling to analyze attack surface, entry points, and threats; produced a traceability matrix of risks mapped to different threat actors with impact and exploitability to improve penetration testing exercises and test case preparation.• Supported and collaborated with higher-tier support teams on raised incidents and engaged in remediation planning efforts to enhance database security and overall security posture.• Conducted security research on emerging threats, acted as a technical SME during significant security incidents, and drove rule tuning and detection use cases across SOC tools.• Conducted training sessions and knowledge-sharing activities, enhancing team capabilities and awareness, while updating the CSOC knowledge management repository.• Utilized scripting tools (Python, Perl, Shell, HTML, PHP) to automate tasks and enhance security operations, and managed log management solutions like Splunk and RSA Envision.• Engaged in cloud security practices for AWS and Azure environments and demonstrated understanding of compliance regulations such as SOX, PCI, and CPNI.