Shashi Y. Email & Phone Number

I am an accomplished and highly skilled Application Security Professional with five years of dedicated experience in the field. Throughout my career, I have had the privilege of serving numerous Fortune 500 companies, contributing significantly to their cybersecurity posture and helping protect their critical assets. I am deeply committed to ensuring the security and integrity of software and applications, using my expertise to identify vulnerabilities, develop robust security strategies, and drive a culture of security awareness.Key Accomplishments:Fortune 500 Impact: I have worked with several Fortune 500 companies, assisting them in strengthening their security defenses and safeguarding their sensitive data from evolving cyber threats.Comprehensive Security Testing: My expertise spans the entire spectrum of application security testing, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and penetration testing. I have conducted extensive assessments, delivering comprehensive reports that have guided effective remediation efforts.Vulnerability Management: I have successfully identified and mitigated a wide range of security vulnerabilities, making a substantial contribution to enhancing the resilience of applications and systems.Regulatory Compliance: I have ensured that the applications I work with adhere to industry standards and regulatory requirements. My efforts have been instrumental in helping organizations maintain compliance with essential frameworks, such as OWASP, PCI DSS, and HIPAA.Incident Response: I have played a pivotal role in incident response efforts, effectively mitigating and managing security breaches and devising strategies to prevent future occurrences.Risk Assessment: My thorough risk assessments have provided organizations with insights for informed decision-making, enabling them to allocate resources efficiently and prioritize security initiatives.Team Collaboration: I have consistently collaborated with cross-functional teams, including developers, DevOps, QA, and system administrators, ensuring that security is an integrated component of the software development life cycle.Continuous Improvement: I am committed to the continuous enhancement of security testing methodologies and practices, staying updated with emerging threats and technologies to proactively address new challenges.

• 

  Application Security Engineer

  Coe Security

  Jan 2019 - Present - Fort Mill, South Carolina, United States

  As an Application Security Professional, my primary role is to ensure the robust security of our software and applications through a multifaceted approach to security testing and assurance. This encompasses various methodologies and techniques, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and penetration testing (Pentesting). My responsibilities include conducting vulnerability assessments, using specialized security testing tools, reviewing source code for vulnerabilities, scanning web applications and APIs for security issues, analyzing third-party software dependencies, and simulating adversarial attacks to evaluate security postures.I meticulously document my findings and create comprehensive reports with guidance for remediation, prioritizing vulnerabilities by risk level. Additionally, I collaborate closely with development and IT teams, offer advice on fixing security issues, and ensure that applications adhere to security policies and compliance standards. I conduct security awareness programs, participate in threat modeling exercises, and stay up-to-date with emerging security threats and technologies. I also assess risks, collaborate with cross-functional teams, and continuously seek opportunities to enhance our security practices.In essence, my role is to safeguard our software ecosystem, protect sensitive data, and ensure compliance with industry standards and regulatory requirements. I contribute to maintaining a security-conscious organizational culture and proactively identify and address security weaknesses, making our applications and infrastructure resilient against evolving cyber threats.