Subham Misra Email & Phone Number

Cloud Native Security: Building & designing Container security solutions, CSPM (Cloud Security Posture Management) and automating security in CI/CD pipeline.Web and Mobile Security: Well versed in assessing enterprise level sensitive legacy as well as modern technology rich API based web application. Proficient in assessing Mobile (Android & iOS) applications. Performed SAST and DAST - includes reverse engineering of application executable, Storage and log inspection, Dynamic binary instrumentation using Frida and Objection framework, runtime interception and analysis of application traffic, business logic bypass etc. Red Teaming: Performed Red Teaming for several clients with enterprise Active Directory setup, used assume breach and adversarial simulation methodology to abuse cross domain trust, able to perform Kerberoasting, Golden and Silver ticket hash replay attack etc. Proficient knowledge of tools like BloodHound and Mimikatz.IoT Security: Performed Firmware analysis using Firmadyne and binwalk . Good knowledge of attacks on BLE protocol and Zigbee based devices. Used Gattacker, Bettercap, btlejuice etc. Recently performed assessment of a popular SmartWatch device and found various critical issues.Cloud Security: Performed Cloud environment Security assessment. Found vulnerabilities like unauthorized access to sensitive data in S3 buckets, misconfiguration in OAuth Identity provider for third party applications, insecure Docker registry etc.API Security: Experienced in developing REST APIs and able to perform API assessment following OWASP Top 10 for API.Found vulnerabilities such as Broken Object & Function level Authorization, Excessive data exposure, Broken authentication in JWT etc.

Listed skills include Leadership, Secure Code Review, Amazon Web Services, C, and 19 others.

• 

  West Bengal University Of Technology, Kolkata

  Cse