Nishanth M Email and Phone Number

1.Conduct comprehensive vulnerability assessments, documenting identified risks andvulnerabilities, and producing detailed, actionable reports with strategic remediationrecommendations.2.Collaborate in the creation, deployment, and continuous improvement of securitypolicies, standards, and procedures to ensure organizational security compliance.3.The deployment and validation of secure container images using Jenkins, ensuringrigorous image hardening and compliance with Azure Security Policies.4.Conduct automated security scans on every software release, leveraging advancedsecurity tools such as BlackDuck, SpotBugs, Prisma Cloud, Dependency Checker,Netsparker, Contrast and Checkmarx to identify and mitigate vulnerabilities.5.Investigate and address Common Vulnerabilities and Exposures (CVEs) in third-partylibraries, ensuring quick remediation and minimizing risk to customer environments.6.Perform both manual and automated security scans on enterprise products to ensurecomprehensive coverage of potential vulnerabilities, maintaining a proactivesecurity stance.

▪Performing complete VAPT (Vulnerability Assessment and Penetration Testing)and re-validation of various inhouse and external web applications and API’s.▪ Perform grey box, black box testing of the web applications, API’s.▪ Perform pen tests on different web applications, API’s and infrastructures every weekand prioritizing found issues based on risk level.▪ Create VAPT reports and trackers, detailing assessment findings andrecommendation.▪ Performed static code reviews with the help of automation tools like HCL AppScan.▪ Work closely with research and development teams for vulnerability remediation.▪ Found web site security issues (XSS, CSRF, session fixation, SQL injection, informationleakage, application logic etc.) across various platforms.▪ Skilled using tools like Automatic Scanner and crawlers, NMAP, Dirbuster, Qualysguard,Nessus, OpenVAS for web application penetration tests and infrastructure testing

Desktop Engineer/ Windows Server administrator.

Desktop engineer / Server administrator Access Healthcare Engineer