• Penetration testing lead in Product Transformation Center Security• Conduct comprehensive security assessments across various platforms including Web, API, Mobile, Network, and Cloud environments.• Expertise in Containers, Kubernetes (IKS, Openshift) and security tools like Kube-hunter, Kube-audit, nmap , Nessus and Metasploit framework.• Prepare detailed executive reports as per OWASP, CVSS standards and adhere to security and risk frameworks and regulatory compliance frameworks like PCI DSS, HIPAA and lead closing meetings with product teams to discuss assessment findings and mitigation strategies.• Provide actionable remediation recommendations for identified vulnerabilities and collaborate with development teams to explain security impacts and lead closing meetings with product teams to discuss assessment findings and mitigation strategies.• Identify and implement automation opportunities to optimize processes and uphold security standards throughout the organization.• Demonstrate and possess excellent interpersonal, written, and oral communication skills• Collaborate on security initiatives and promote security standards across organization

• Senior Security Consultant in Application Security.• Collaborate with developers to ensure secure product and microservices development.• Conduct comprehensive API and Web application security testing using advanced tools like Burpsuite Pro and Fortify WebInspect.• Perform manual penetration testing and develop proof-of-concept exploit examples.• Demonstrate strong technical writing and communication skills, and train internal teams on security testing processes.

• Security consultant in Digital Security.• Manual Dynamic Security Assessments on various Mobile client applications (iOS & Android) using tools like Proxy tools ( BURP, Charles, MITM proxy, fiddler, ZAP), Mobile Security testing tools (Cycript, apktool, Dex2jar, JDGUI, Drozer, enjarify, qark, Mobile Assistant, keychaindumper, sqlite3, binarycookiereader, SSL kill switch, adb and so on)• Static and Dynamic Web Application security testing on various Client Applications using tool like MicroFocus Fortify and Burp Suite Professional.• Ability to analyse test results and suggest mitigation to security problems.