Stella V Email & Phone Number

India

• Conducting application vulnerability assessments and penetration testing, as well as web application security reviews for Trueblue web applications. This includes performing goal-focused assessments and effectively communicating the findings and recommendations to key stakeholders• Performing manual penetration testing on web applications to identify vulnerabilities and potential security risks• Utilizing Rapid7 for automation testing of the web application for Dynamic Application Security Testing(DAST), ensuring comprehensive security testing coverage• Conducting Static Application Security Testing (SAST) using SYNK for the web application to identify potential vulnerabilities in the codebase• Collaborating with the development and engineering teams to address and remediate identified security vulnerabilities and issues• Keeping up to date with the latest security trends, vulnerabilities, and exploits in order to provide proactive security measures• Assisting in the development and implementation of security best practices, policies, and procedures• Participating in incident response activities, including investigating and mitigating security incidents or breaches• Contributing to the ongoing improvement of security testing methodologies, tools, and processes• Providing security awareness and training to other teams and employees as needed

India

• Conducted thorough application vulnerability assessments and penetration testing for CGI web applications.• Performed manual penetration testing on web applications, systematically tested for vulnerabilities, and attempted to exploit them to assess the effectiveness of the application's security measures• Communicated the findings and recommendations clearly to key stakeholders, such as developers, project managers, and senior management

Bangalore, India

• Conducted application vulnerability assessment and penetration testing, as well as web application security reviews, for Microfocus web applications• Performed manual penetration testing of web applications and automation testing on HP-Webinspect for the web application, using automated tools to identify potential vulnerabilities and security risks.• Performing manual testing on Authentication and Authorization, Access control, Input validation and Business logic flaws.

India

• Conducted application vulnerability assessment and penetration testing, as well as web application security reviews, for Conduent Applications• Performed manual penetration testing of web applications and automation testing on IBM-Appscan for the web application• Created reports that detailed assessment findings and recommendations and tracked the assessment progress to ensure closure of identified issues• Verified false positives reported by automated tools through manual verification Conducted formal Vulnerability Assessment tests on applications to identify vulnerabilities and potential security weaknesses.• Created test scripts for applications using Python scripting• Actively engaged in interactions with clients and development teams to address and resolve identified issues• Managed workflow by assigning tasks to the team

Bengaluru Area, India

• Conducted network and application penetration testing, as well as web application security reviews for HPE Network & Applications, ensuring assessments and exploitation aligned with set goals, while effectively communicating findings and recommendations to key stakeholders• Performed manual penetration testing on web applications, identifying and addressing potential vulnerabilities• Created comprehensive reports detailing assessment findings and recommendations, and tracked their progress until closure• Carried out vulnerability assessment tests on systems, operating systems, and applications, pinpointing vulnerabilities in large enterprise systems and hosting infrastructure• Developed test cases and plans to evaluate all possible web application vulnerabilities• Detected, categorized, and maintained records of bugs based on severity, while updating the CVE/CWE/CVSS. Collaborated with developers by raising defects in PSRT and discussing solutions• Created and maintained PET sheets and VSL sheets, logging issues in QUIX and Rally • Developed test scripts for applications, ensuring comprehensive coverage• Explored the use of Burp Extender for CSRF and XSS vulnerabilities, and wrote custom extension scripts in Python to enhance testing capabilities

Master'S Degree, Cyber/Computer Forensics And Counterterrorism

Bachelor Of Technology - Btech, Computer Science, 1St Class

Diploma Of Education, Computer Science And Enginering, Distinction - 75%