Lalit Singharia Email & Phone Number

United States

• Conducted thorough penetration tests on web applications using cutting-edge tools like Burp Suite, OWASP ZAP, Metasploit, Nmap, and Nessus, identifying and exploiting vulnerabilities (+75 projects).
• Collaborated closely with development teams, implementing secure coding practices in cloud-based environments (e.g., AWS, Azure, GCP), ensuring compliance with industry standards and mitigating security risks.
• Led threat modeling exercises to identify potential risks and devised effective mitigation strategies for secure web application development (+30 threat models).
• Utilized additional tools such as Veracode, SonarQube, and web application firewalls (WAF) to enhance security assessments and protect cloud-based web applications

• Reviewed code for security vulnerabilities, utilizing static code analysis tools like Checkmarx and Fortify.
• Implemented secure authentication mechanisms, including multi-factor authentication (MFA) and token-based authentication, to strengthen web application security.
• Assisted in the development and implementation of secure SDLC practices, integrating security throughout the software development process.
• Collaborated with cross-functional teams to resolve security incidents and perform forensic analysis on compromised web applications.
• Collaborate with development teams to implement secure coding practices, ensuring adherence to security standards and mitigating potential risks.
• Develop and deliver security training programs to educate developers on secure coding practices and emerging threats.

• Performed black-box and white-box penetration testing on web applications, utilizing tools such as Burp Suite, Nessus, and Metasploit.
• Conducted vulnerability assessments, identifying and prioritizing vulnerabilities based on their potential impact.
• Produced detailed penetration testing reports, including findings, recommendations, and remediation steps.

Conducted code reviews for web applications, identifying security vulnerabilities and suggesting improvements.· Utilized static code analysis tools such as Veracode and SonarQube to identify common coding errors and security weaknesses.

• Assisted in conducting vulnerability assessments and penetration testing on web applications, documenting findings, and providing recommendations for remediation
• Supported secure coding initiatives by reviewing code for security vulnerabilities and assisting in the implementation of secure coding practices.
• Assisted in managing web application firewalls (WAF) and monitoring security events for potential threats.