Venkat K Email & Phone Number

Houston, Texas, United States

Perform DAST using Burp Suite pro and OWASP ZAP. Implemented Cloud Threat Modeling in Azure. Identify Vulnerabilities through test, system design review or code analysis. Provide the root cause for identified vulnerabilities and generate report. Work on creating strong documentation for identified and repeatable tasks. Perform manual web application penetration tests on both internal and external systems to identify vulnerabilitiessuch as those listed in the Open Web Application Project (OWASP) top 10. Participate in Project meetings and provide specifications deliverables in coordination with Omron team Architectsand Management teams. Implemented Azure Cloud Governance for Azure Resources and Azure Active Directory components. Generated executive summary reports showing the security assessments results, recommendations and riskmitigation plans and presented them to the respective business sponsors and senior management. Worked with DevOps teams to automate security scanning into the build process. Reviewed Android and iOS mobile source code manually and recommended code fixes. Participated in the Proof ofConcept (POC) in implementing Arxan application protection software for Mobile apps. Analyzed security incidents originated from various network/application monitoring devices (e.g., Symantec VontuDLP) and coordinated with Engineering teams for tracking and problem escalation, including remediation. Performed the penetration testing of mobile (Android and iOS) applications, specifically, APK reverse engineering,traffic analysis and manipulation, dynamic runtime analysis.

Silicon Valley, California, United States

Consult with Clients to gain an understanding of their business, implement identity and access managementsolutions. Advise clients on IAM best practices and designs to protect their highly sensitive and important information tofundamentally strengthen their security postures. Experience working with identities across an enterprise B2B or B2C. Experience with on-prem implemented Active Directory and IAM for AAD. Hands-on knowledge of IAM best practices, procedures and software solutions. Experience designing and implementing or supporting provisioning AAD, SailPoint. Design and implementing access control with RBAC/ABAC. Experience in Azure cloud Governance implementations for IAM. Used SAST tools Checkmarx & HP Fortify to test source code and byte code to expose weaknesses in the softwarebefore it is deployed. Perform DAST using Accuitix ,Burp Suite pro and OWASP ZAP Responsible in web application vulnerabilities (OWASP Top 10, SANS, NIST) to review application source code tofind its security vulnerabilities (CSRF, XSS, SQL Injection, Privilege Escalation, etc.) and recommend remediation. Triaging the vulnerabilities identified and performing false positive analysis for the vulnerabilities identified. Assist developers in remediating issues with Security Assessments concerning OWASP standards. Identified issues on sessions management, Input validations, output encoding, Logging, Exceptions, Cookieattributes, Encryption, Privilege escalations. Implemented Open Text Endpoint Security (EDR) for validate, analyze, triage and respond to Incidents. Implemented SQL Plan Management on mission-critical application to lock down execution plans for high usageSQL statements.

Austin, Texas, United States

Designed, deployed, and administered current IAM and Active Directory technologies in cloud solutions likeMicrosoft Azure Active Directory and integrations with SailPoint (Identity IQ). Experience with installations, Implementations, configurations and upgrade Identity IQ with SailPoint. Configure Identity IQ using Azure SQL, SQL Server and deploy using Tomcat and Jobs. Configure Identity IQ for Single Sign-on, Integration with third party applications for Automated remediation, roleprovisioning and Policy checking for access changes. Utilize IAM programs to enable federal clients to protect against digital identity risks. Deployed and managed security-based cloud strategy including RBAC, Key vault, SAML, and Managed Identities. Designed Azure Cloud Governance-based RBAC Active Directory, Group Policy, Networking, Security and WindowsServer, and third-party enterprise technologies. Enable SSO with OpenText Directory Services with Azure AD. Experienced in core IAM Domains such as Identity Governance and Administration, Privileged Access. Management,Authentication, Authorization, and Identity. Conduct vulnerability scans on the infrastructure, assess risk, and provide actionable remediation guidance. Performed Vulnerability Assessments to the Web applications in the organization using the tools Burp suite, HPFortify also performed Data Classification.

Conducted Static Application Security Testing (SAST) using tools such as HP Fortify and Dynamic ApplicationSecurity Testing (DAST) using tools such as IBM AppScan. Worked with Burp Suite, SQL Map, Nmap, and Nessus. Provide the report and explain the remediation steps to the team and follow up with fixed issues and ensure theclosure and perform secure code review of the code base. Conducted onsite penetration tests from an insider threat perspective Execute and craft different payloads to attack the system to execute XSS and different attacks. On call for monitoring servers ensure that the application is up and running. Daily checks, weekly, monthly and quarterly checks as part of Maintenance. Conduct Vulnerability scans on the infrastructure, assess risk, and provide actionable remediation guidance. Work cross-functionally with other Divisions within IT and review and report on the likelihood and impact ofvulnerabilities and associated remediation action plans. Translate highly technical content into understandable language for personnel in various departments. Operationalize regular vulnerability scans, track and report metrics, and common themes in discoveredvulnerabilities. Carried out remediation across multiple systems AIX, Linux, Red hat, Centos, Windows Server and Sun Solaris. Scanning for CVE vulnerabilities inside the components/library/dependency files in the repository.

United States

Conducted Static Application Security Testing (SAST) using tools such as HP Fortify and Dynamic ApplicationSecurity Testing (DAST) using tools such as IBM AppScan. Worked with Burp Suite, SQL Map, Nmap, and Nessus. Provide the report and explain the remediation steps to the team and follow up with fixed issues and ensure theclosure and perform secure code review of the code base. Conducted onsite penetration tests from an insider threat perspective Execute and craft different payloads to attack the system to execute XSS and different attacks. On call for monitoring servers ensure that the application is up and running. Daily checks, weekly, monthly and quarterly checks as part of Maintenance. Conduct Vulnerability scans on the infrastructure, assess risk, and provide actionable remediation guidance. Work cross-functionally with other Divisions within IT and review and report on the likelihood and impact ofvulnerabilities and associated remediation action plans. Translate highly technical content into understandable language for personnel in various departments. Operationalize regular vulnerability scans, track and report metrics, and common themes in discoveredvulnerabilities. Carried out remediation across multiple systems AIX, Linux, Red hat, Centos, Windows Server and Sun Solaris. Scanning for CVE vulnerabilities inside the components/library/dependency files in the repository.

Conducted Static Application Security Testing (SAST) using tools such as HP Fortify and Dynamic ApplicationSecurity Testing (DAST) using tools such as IBM AppScan. Worked with Burp Suite, SQL Map, Nmap, and Nessus. Provide the report and explain the remediation steps to the team and follow up with fixed issues and ensure theclosure and perform secure code review of the code base. Conducted onsite penetration tests from an insider threat perspective Execute and craft different payloads to attack the system to execute XSS and different attacks. On call for monitoring servers ensure that the application is up and running. Daily checks, weekly, monthly and quarterly checks as part of Maintenance. Conduct Vulnerability scans on the infrastructure, assess risk, and provide actionable remediation guidance. Work cross-functionally with other Divisions within IT and review and report on the likelihood and impact ofvulnerabilities and associated remediation action plans. Translate highly technical content into understandable language for personnel in various departments. Operationalize regular vulnerability scans, track and report metrics, and common themes in discoveredvulnerabilities. Carried out remediation across multiple systems AIX, Linux, Red hat, Centos, Windows Server and Sun Solaris. Scanning for CVE vulnerabilities inside the components/library/dependency files in the repository.