- Responsible for driving and executing Annual Red Team, Pentest , Architecture review and Threat Modelling roadmap.- Coordinate with external vendors to perform PCI pentests and validate the reported findings inclduding the highlighted Risk - Drive ChargePoint Bugbounty Programs - Creating Red team, Application pentest policies for the company.- Executing Red Team/Purple team engagements using MITRE ATT&CK framework.- Product testing (EDR solutions, WAF, Email solutions, AV).- Executing Application pentest- Executing Infrastructure/Active Directory Pentesting.- Executing ThreatModelling/Architecture review- Executing Container Based Network Pentesting.- Executing Cloud Pentesting (AWS).- Fine tune the WAF- Mentoring junior testers.

- Responsible for planning the Annual Red Team & N/w Pentest roadmap.- Drive end to end Vulnerability management program.- Creating Red team & N/w pentest policies for the company.- Scoping Red team/ N/w Pentest engagements.- Creating SOW and Debrief the findings with the stakeholders, support ISO, SOC2 and PCI auditby proving evidence, policy document and be a point of contact to external & Internal auditorsrelated to N/w and red team activities.- Managing end to end internal GIS N/W Pentest life cycle.- Mentoring junior testers.- Performing Red Team/Purple team engagements using MITRE ATT&CK framework.- Performing product testing (EDR solutions, Email solutions, AV).- Infrastructure/Active Directory Pentesting.- Container Based Network Pentesting.- Cloud Pentesting (AWS).

- Created Red team methodologies for the team.- Performed Application Pentest (Web & Desktop).- Performed Mobile Application Pentesting (IOS & Android).- Performed Network Pentesting.- Performed Vulnerability Assessment.

- Created Web, Mobile, Endpoint & Infrastructure pentesting methodology for the team.- Scoping of the pentesting engagements, Creating Statement of Work and performed QA on thepentesting reports. - Performed Stealth Based Red Team assessment and Physical penetration testing for companiesin Banking & Insurance Sector.- Performed External & Internal Infrastructure penetration testing for Banks, Pharmaceutical andInsurance Sector.- Performed Endpoint penetration testing for companies in Insurance & Banking sectors.- Performed large volumes of application penetration testing for a variety of companies based inInsurance, Banks and Pharmaceutical Sector based.- Application types tested included Web application, Desktop client and Mobile applications(Android/IOS).- Executed Wi-Fi Penetration testing for Banking and Insurance sector.- Executed ATM Penetration testing for Banking sector.

- Created Application Pentesting Methodology for the team- Executed External Attack & Penetration Testing of various Banks and Telecom Service Providersin Middle East and Africa- Performed periodic Internal Vulnerability Assessment for various clients in Middle East and for allErnst & Young Middle East offices.- Application Penetration testing for both web and standalone applications for various clients inMiddle East and Africa, as well as internally developed applications in Ernst&Young.- Mobile Application Testing on Android & IOS platforms.- Executed Wi-Fi Penetration testing for EY GSS office

- Triaging the phishing emails- Administering AD, RSA servers, VDI, Blackberry.- Administering AD, RSA servers, VDI, Blackberry.