Prateek Ranjan Email and Phone Number

Sector Focus - Mining & Metals, Telecom-> Strengthened client’s security posture by 30 percent through effective assessment, management, and mitigation of key vulnerabilities and potential threats.-> Analyzed over 80 public-facing applications, uncovering critical vulnerabilities such as price parameter tampering in e-commerce sites, SQL injection enabling database extraction, and account takeover through response manipulation.-> Identified common gaps and… Show more Sector Focus - Mining & Metals, Telecom-> Strengthened client’s security posture by 30 percent through effective assessment, management, and mitigation of key vulnerabilities and potential threats.-> Analyzed over 80 public-facing applications, uncovering critical vulnerabilities such as price parameter tampering in e-commerce sites, SQL injection enabling database extraction, and account takeover through response manipulation.-> Identified common gaps and misconfigurations to develop secure coding guidelines, promoting improved development practices and reduction in the count of recurring issues by 60 percent.-> Led over 40 weekly client presentation calls, ensuring timely tracking and closure of vulnerabilities.-> Performed multiple AWS WAF Configuration Reviews thereby enhancing WAF level security. Show less

-> Spearheaded an 8-month client engagement covering Application security, Configuration review, Network security, Cloud Security and Red Teaming Assessment.-> Performed over 15 Android application security reviews covering both static and dynamic analysis, while also utilizing automated tools like MobSF.-> Provided one-on-one client sessions to ensure effective implementation of suggested mitigation actions.-> Worked in collaboration with the team on remote as well as… Show more -> Spearheaded an 8-month client engagement covering Application security, Configuration review, Network security, Cloud Security and Red Teaming Assessment.-> Performed over 15 Android application security reviews covering both static and dynamic analysis, while also utilizing automated tools like MobSF.-> Provided one-on-one client sessions to ensure effective implementation of suggested mitigation actions.-> Worked in collaboration with the team on remote as well as on-site red teaming assessments for multiple clients.-> Delivered a practical training session on Web application security assessment approach and methodologies. Show less

-> Received the EY Exceptional Award as a token of appreciation.-> Performed in-depth VAPT exercise on more than 45 web applications including SaaS based platforms.-> Utilized automation tools like Nessus Professional to carry out multiple infrastructure vulnerability assessment followed by exploitation and reporting.-> Delivered tailored mitigation actions and compensatory controls for clients, customized to meet their specific requirements.

-> Conducted comprehensive web application security assessment for over 20 applications based on OWASP Top 10-> Supported the implementation of custom security measures and protocols to protect against potential threat-> Gained hands-on experience with various industry standard tools and technologies like Burp Suite, Acunetix and Nessus Professional