Kumar Mayank Email & Phone Number

I am CEH certified Experienced Cybersecurity Professional with a strong background in manual penetration testing, application security, and vulnerability management. Proven expertise in identifying and mitigating security risks using a comprehensive approach and industry-leading tools.Core CompetenciesManual Penetration Testing: Conduct in-depth security assessments using over 50 test cases, including SQL injection, cross-site scripting (XSS), and privilege escalation. Generate detailed reports and collaborate with developers to implement effective mitigations.SAST (Static Application Security Testing): Perform static code analysis with tools like Fortify SCA, evaluating and suppressing vulnerabilities based on thorough justification and resolution.DAST (Dynamic Application Security Testing): Execute dynamic testing using WebInspect and other tools, managing and resolving identified vulnerabilities.Security Auditing : Lead security audits for new application launches and UI/UX changes in existing applications. Review comprehensive security reports, including SCA, VA, PT, SAST, DAST, and manual PT.Tools Utilized- Fortify SCA, WebInspect, OWASP ZAP, Burp Suite, Metasploit Pro- Various Kali Linux tools (Nmap, Metasploit, Nikto, Wireshark, sqlmap, Hashcat, Hydra, Ettercap, Social Engineering Toolkit)Achievements:- Awarded three times at TCS for delivering exceptional security services and leading the manual penetration testing team.- Achieved 1st place in a company-wide cybersecurity quiz at TCS.Passionate about safeguarding information and enhancing system integrity, I thrive in collaborative environments where I can leverage my skills to support organizational security goals.

• 

  Security Engineer

  Tata Consultancy Services

  Jul 2021 - Present

  Core CompetenciesManual Penetration Testing: Conduct in-depth security assessments using over 50 test cases, including SQL injection, cross-site scripting (XSS), and privilege escalation. Generate detailed reports and collaborate with developers to implement effective mitigations.SAST (Static Application Security Testing): Perform static code analysis with tools like Fortify SCA, evaluating and suppressing vulnerabilities based on thorough justification and resolution.DAST… Show more Core CompetenciesManual Penetration Testing: Conduct in-depth security assessments using over 50 test cases, including SQL injection, cross-site scripting (XSS), and privilege escalation. Generate detailed reports and collaborate with developers to implement effective mitigations.SAST (Static Application Security Testing): Perform static code analysis with tools like Fortify SCA, evaluating and suppressing vulnerabilities based on thorough justification and resolution.DAST (Dynamic Application Security Testing): Execute dynamic testing using WebInspect and other tools, managing and resolving identified vulnerabilities.Security Auditing : Lead security audits for new application launches and UI/UX changes in existing applications. Review comprehensive security reports, including SCA, VA, PT, SAST, DAST, and manual PT.Tools Utilized- Fortify SCA, WebInspect, OWASP ZAP, Burp Suite, Metasploit Pro- Various Kali Linux tools (Nmap, Metasploit, Nikto, Wireshark, sqlmap, Hashcat, Hydra, Ettercap, Social Engineering Toolkit) Show less

• 

  Vinoba Bhave University

  Computer Science