Sasmitha Banu M Email & Phone Number

As a cybersecurity expert with comprehensive experience across multiple domains, my profile outlines a versatile and robust skill set tailored to meet the evolving challenges of today's digital landscape:- Application Security Assessment: Proficient in both web and mobile applications, I conduct thorough studies of applications, develop business-level test cases, and execute these alongside generic level tests manually and using automated scanners like Burp, IBM App Scan, and Netsparker. - Network Penetration Testing: Skilled in utilizing advanced tools such as Kali Linux, Metasploitpro, Qualys Guard, Nessus, Nexpose, and Nmap for scanning network levels on IPs and hosts. I perform manual testing on reported threats to generate detailed penetration test reports.- Configuration Audits & Firewall Analysis: I assess vulnerabilities in device configurations and firewall rule bases to provide strategic action plans for mitigation based on comprehensive assessments.- Cybersecurity Framework Implementation: My work involves deep analysis and modification of IT security policies according to TRM requirements. This also includes managing phishing campaigns by conducting scenario-based training sessions coupled with quizzes to enhance security awareness.- Information Security Management Systems (ISMS): As a lead auditor for ISMS internal audits conforming to ISO 27001 standards, I manage pre-audit engagements and conduct gap assessments to ensure compliance with international standards across various industries.- Stakeholder Management & Risk Assessments: Experienced in handling stakeholder interactions across regions (APAC, EMEA, AMER) while conducting cybersecurity risk management assessments in alignment with frameworks like NIST.- Security Architecture & Incident Response: With capabilities in designing secure architectures and managing endpoint security risks, I also oversee incident response audits that contribute significantly towards fortifying cyber resilience environments.This diverse skill set not only highlights my ability to safeguard digital assets but also underscores my capacity to drive significant improvements in enterprise-wide cybersecurity postures.

• 

  Cybersecurity Manager

  Protiviti

  May 2022 - Present - Singapore

  With a diverse cybersecurity expertise, my skills encompass multiple key areas:- Web Application Vulnerability Assessment & Penetration Testing: I have conducted internal and external vulnerability assessments and penetration testing for various sectors including government and finance. This includes advising development teams on findings, managing projects through all stages, and using tools like Burp, Netsparker, and Appspider.- Network Vulnerability Assessment & Penetration… Show more With a diverse cybersecurity expertise, my skills encompass multiple key areas:- Web Application Vulnerability Assessment & Penetration Testing: I have conducted internal and external vulnerability assessments and penetration testing for various sectors including government and finance. This includes advising development teams on findings, managing projects through all stages, and using tools like Burp, Netsparker, and Appspider.- Network Vulnerability Assessment & Penetration Testing: My experience extends to both external and internal network assessments where I've utilized tools such as Nessus, Kali Linux, Metasploit, and Nmap. I provide comprehensive reports on identified vulnerabilities along with actionable mitigation plans.- Mobile Application Testing: Proficient in mobile penetration testing for Android and iOS devices using tools like Wireshark, Apktool, Burp, TCPDUMP to reveal potential vulnerabilities in mobile applications.- OS Hardening & Network Device Hardening: Reviewed OS and network device policies for Singapore's largest telecommunication service in line with guidelines while using tools like Nipper Studio and Nessus professional for assessment.- Firewall Rule Base Audits: Successfully identified gaps in firewall rules for a leading bank in Singapore that led to enhanced security measures.- IT Audit & Security: Performed cybersecurity audits and risk management assessments in line with the NIST Framework. Provided oversight on the planning, design, implementation of application and network security reviews.- Security Incident Response Audit: Conducted reviews on log data to assess the performance of threat detection controls which played a crucial role in shaping clients' cyber resilience environment. Show less

• 

  Sns College Of Engineering

  Information Technology