Praveen Kumaresh Email & Phone Number

Bengaluru, Ka, In

Bangalore Urban, Karnataka, India

Security Solution Design: Developed and implemented robust security architectures for networks, applications, and cloud systems. Hands-on experience in security architecture consultancy, creating conceptual, solution, and technical architecture documents.Risk Assessment & Threat Modeling: Identified security threats through risk assessments and conducted threat modeling. Scoped penetration testing, ensuring comprehensive assessments. Assisted application teams in achieving "Approval to Operate" from NITSO.Compliance & Standards: Ensured adherence to industry standards such as GDPR, HIPAA, ISO 27001, and security patterns. Implemented Azure security architecture services and AWS security services including AWS Shield, KMS, ACM, GuardDuty, Security Hub, IAM, and cross-account IAM setups.Secure Software Development: Implemented DevSecOps practices, integrating security policies and tools into the software development life cycle. Proficient in integrating security with various tools like Jenkins, Azure DevOps, and automation techniques. Contributed to research and innovation in DevSecOps practices.Security Reviews: Conducted application architecture reviews, identifying and addressing security gaps proactively.Documentation & Reporting: Maintained comprehensive documentation of security processes, architectures, and incidents. Generated regular security reports for management.Collaboration & Training: Collaborated with cross-functional teams and executives to integrate security strategies. Conducted security awareness programs and facilitated a security-conscious culture within the organization.

Bangalore

Responded to more than 10 requests for proposal (RFP) in collaboration with PwC advisory partners.Worked with client-facing Partners to prepare estimates, Point of Views, Position Papers and contribute towards pursuits, proposals, and Statement of Work.Strong capability to architect highly scalable distributed systems that are event-driven, responsive, scalable, and secure.Responsible for delivering professional grade Network Penetration Testing, Web & Mobile application security assessment for fortune 500 companies globally.Delivered multiple vulnerability management projects, added value to service delivery by augmenting automation and analytics. Built Alteryx modules to prioritize the vulnerabilities as per the risk and scope of the project and used Tableau dashboarding for better understanding to the management. Product owner/manager for multiple automation products which are built using agile methodology.Automation champion - Responsible for driving Standard and Automation which includes Ideation, Project Management and Execution using RPA tools like Alteryx, UIpath and Python scripts.Participating in the organization-wide people initiativesCertified in emerging technologies - Cloud, Automation, Blockchain and IoT.Helped recruit employees; assign, direct, and evaluate their work; and oversee the development and maintenance of staff competence.Strong oral and written skills with superior PowerPoint capabilities.

Bangalore

Project DetailsRole - Team Lead and Lead Tester.Duration - Feb 2017 to PresentIndustry - Media and Cable BroadbandTeam Size - 51) Performed targeted security assessments on clients application stacks, and detected and remediated vulnerabilities before applications are released into the production environment. 2) Perform full stack assessments, reviewing web and mobile applications, web services, databases, network devices, and operating systems components.3) Improved the efficiency of the program by increasing the number of applications reviewed monthly by a factor of 5, while also dropping our unit cost per assessment through the introduction of automation.4)Developing an automated operating system assessment methodology which enables development teams to perform "self-service" OS scans prior to the team’s involvement.5) Developing an automated Mysql database system assessment script.Project DetailsRole - Team Lead and Lead Tester.Duration - 3 Months (Oct-Dec 2016)Industry - PharmaTeam Size - 121) Web Application security assessment for Global major Pharma client, with 1500 URLs to be tested in span of two months.2) Managed a team of 12 members with application security experience , acted as lead tester and Point of contact to client.3) Assessment was conducted using a mix of Automated testing with HP Web inspect and Manual testing with Burp Suite Pro tool.4) Security Test Report was provided for all vulnerabilities with Proof of Concept and Remediation process.

Bengaluru Area, India

Penetration Testing Service.- Managing Penetration Testing team at Capgemini Cyber Security unit – 5 Team members- Involved in bidding, Cost Estimation, Effort estimation, Portfolio building - Actively training team members and Team Building activity- Manual Infrastructure and Web application Penetration Testing experience beyond running automated tools- Perform OSNIT , reverse lookup , email harvesting, dnsrecon, Google Hacking- Experience in finding common web security issues(XSS, CSRF, SQL Injection,Session Fixation, Information Leakeage etc.)- Explained the output of a penetration test to a non-technical client and other stake holders- Prepared Executive and technical Penetration Test Report for external clients- Prepared Penetration testing framework document and scope documents as per client requirements

Bengaluru Area, India

Penetration Testing Service.- Manual Infrastructure and Web application Penetration Testing experience beyond running automated tools- Perform OSNIT , reverse lookup , email harvesting, dnsrecon, Google Hacking- Experience in finding common web security issues(XSS, CSRF, SQL Injection,Session Fixation, Information Leakeage etc.)- Explained the output of a penetration test to a non-technical client and other stake holders- Prepared Executive and technical Penetration Test Report for external clients- Prepared Penetration testing framework document and scope documents as per client requirementsWeb application firewall- Prepared High level, Detailed level design document and Standard Operating Procedures documents for large UK based insurance client- Implemented F5 ASM web application firewall from design to run support.- With web application testing and working knowledge build a robust security policy- Fine tuned ASM policy with near to zero false positive alerts- Performed F5 ASM audits and developed F5 ASM xml parsing tool to assist in audit process.PKI and Hardware security module- Prepared High level, Detailed level design document and Standard Operating Procedures documents for large UK based insurance client- Implemented Thales HSM from design to run support.- Integrated Thales HSM with F5 LTM(Local Traffic Manager)- Involved with PCI remediation process, to address datacenter encryption requirement

Bangalore

• Vulnerability Assessment and Penetration testingProvide remote vulnerability assessments and penetration testing for Web applications and Network infrastructure to clients worldwide.Web Application security (WAS) is conducted using the application scanning tool WebInspect. Have Knowledge on OWASP top 10 Policy (OWASP TOP 10)Recommending appropriate vulnerability mitigation approaches to clientsCan perform manual PT according to OWASP testing guide V3Vulnerability scanning & assessment is done through the scanning tool Qualys guard.Juniper NSM SSG 140 Firewall ManagementAdministration of juniper firewall for global locations from NSM managerConfiguring SSG 140 firewalls and import to NSM when handed over by the site and integrate with ArcSight for Event managementInteracting directly with worldwide Clients to understand their needs and resolve their issuesTroubleshoot in live production environment as and when requiredSourcefiire NIDS ManagementUpdate SEU regularly from vendor to keep rules up to dateManage local rules for emerging threatsOn boarding of the Sourcefire sensor to Sourcefire Defense CenterTweak the rule to avoid false positivesGenerating report for eventsTrendmicro HIPS ManagementUpdate DPI rules regularly from vendor to keep rules up to dateOn boarding of new agents to DSM (deep security manager)Analyze the log for any application not responding and remediateConduct regular health check-up of the DSM

Bangalore

Juniper NSM SSG 140 Firewall ManagementInteract with application owners for Firewall port opening and application security problemsDesigned firewall zones and interface security with German counterpartRaise a Request to service provider for FWRC implementation and troubleshootingTest the new rule added to the firewallMonitor the firewall on NSM manager for abnormalityGenerate weekly reports on the firewallBusiness Continuity Planning and Disaster RecoveryProvided design plan for 'Business Continuity Plan/Disaster recovery' (BCP/DR) site which includes Preparation of Project Plan, Risk assessment, Business Impact Analysis (BIA), Strategy selection, Business Continuity Plan Development, BC Plan Testing, BC Plan MaintenanceQualysGuard -Vulnerability Scan toolImplementation and administration of QualysGuard (Vulnerability Scan tool) for Identification of vulnerabilities on a host and related exploits that can be carried out against the hostsIronPort - Secure Web GatewayEvaluation, Design, implementation and administration of IronPort Internet proxy for efficient management of internet access provided to internal users by Provisioning and controlling internet access to the authorized users, Mitigating threats such as Internet access by unauthorized personnel, Internet access to malicious and unwanted websites and increasing internet access speed by caching the frequently accessed contents.Network As is Study and Resilience AssessmentGathering information about the LAN and WAN topology, active devices, configuration, network security, link level redundancy and physical environmental It covered the study of infrastructure, utilities, network and applications and resilience assessment and recommendations

Skillfully steered network infrastructure and planning and design of enterprise local-area/wide area network (LAN/WAN/VPN) solutions, successfully handled data and network Security issues in and around customer sites and providing solutions accordingly.Actively participated in design conferences, generated Network diagrams and detailed network documentation including logical and physical diagrams as requiredSystematically parameterized Cisco ASA firewall, Sonicwall NSA series firewall and Juniper SSG series firewallsVulnerability Assessment and Penetration TestingI had successfully completed numerous vulnerability assessments and penetration testing assignments for our prestigious client's activities includes foot printing for target information like IP address range, DNS, Mail Server, Scanning for finding open port and running services, Enumeration, Privilege Escalation, Clearing logsPOC-Proof Of Concept & Vendor AssessmentConducting Product POC and vendor assessment to review the product's strength and weaknesses in lieu of requirement of the customer and to check whether they are inline with the customer requirement and don't pose any threat after implementation and to submit the final report to customer with the findings and the mitigations once the vendor engagement and clarifications are done.

Bengaluru Area, India

Configuration of Cisco routers (3745 & 1751) and UTM firewall for SMB customers.Troubleshooting of networks using remote login to routers and switches

Master Of Business Administration - Mba, Business, Management, Marketing, And Related Support Services

MBA for working professional is a full time course conducted on weekends at Center for Management Studies(CMS) Jain University. My.

Matriculation, Maths,Science