Varun A. Email & Phone Number

I have 7 years of IT experience, which includes software development and testing experience. I've worked on multiple projects for Fortune 500 companies across various domains such as Manufacturing and Logistics, Energy and Utilities, E-Commerce, Telecommunications, and Low-Code/No-Code solutions. I've worked across all phases of the Software Development Life Cycle, with some of my expertise including: ▪ Web and Mobile application development using the Java technology stack (JSP/JSF, Spring MVC, Hibernate) and front-end frameworks such as React, HTML5, JavaScript. ▪ Web and Mobile application security testing using SAST and DAST techniques. This includes both black-box and white-box techniques. ▪ Shift-left security testing using methods such as Secrets detection, Vulnerability Scanning in CI/CD pipelines, and Vulnerability Management.▪ Threat modeling to uncover possible attack scenarios and also leverage the MITRE ATT&CK framework where possible. ▪ Experience with GitOps approaches to CI/CD using tools like GitHub Actions, Flux CD, Azure DevOps.▪ Deploy and secure Kubernetes workloads, implementing industry best practices to harden containers. Implemented runtime Intrusion Detection/Prevention(IDS/IPS) solutions like Falco to detect and remediate threats during cluster runtime. ▪ Automating everything that can be automated. This can involve writing/enhancing existing open-source tooling or leveraging commercial tools to improve the security testing process or automating organization processes.