Mr K Email & Phone Number

• Manual Threat Modeling: Threat modeling of web applications using STRIDE, DREAD, CVSS and Attack Tree techniques.• Secure Architecture: Secure architecture and coding of web applications using threat modeling in conjunction with SAST (Static Application Security Testing) and DAST (Dynamic Application Security Testing) Tools.• SAST (Static Application Security Testing): Performed source code reviews to the applications using enterprise automated tools and Manual process. Performing False Positive analysis.• DAST (Dynamic Application Security Testing): Performed Vulnerability Assessment for web applications, API and Network. Validating the target for all the vulnerabilities like XSS, SQL Injection etc.• Mobile Security: Good Knowledge and working experience in reverse engineering on binaries and applications and reverse engineering tools.• I have experience in Emulators, Simulators, and mobile security Tools like Dex2Jar, MobSF, Genemotion, APK Took etc.• Analysis of Cryptographic standards - Encryption, Hashing, Digital certificate for all the applications and suggesting the best standards based of the purpose of the application.• Configuring web applications for dynamic scanning using any of the authentication methods like Basic authentication, Forms authentication etc.• Knowledge of Integration of CI/CD tools like Jenkins, Team City with Dynamic and Static application scanners.• Analysis of Project requirement documents and functional specification document.• Defining scope of security testing for the application based on the requirement analysis.• Define security testing tasks or user stories to include in the projects test activities backlog.