Vinothkumar Paulravi Email & Phone Number

Chennai, Tn, In

San Mateo, California, Us

After a two-year stint on the Cloud Security and Operations team, I returned to the Security Engineering team to lead the security of the EX suite of Freshworks products, including Freshservice and Device42.1. Security Enabler - Conduct regular security cadence meetings with the EX team, helping them prioritize security in their roadmap.2. Discuss open vulnerabilities and the associated SLA timeline.3. Perform threat modeling, secure architecture, and design reviews.4. Conduct security incident analysis.5. Assist the GRC/GTM team with compliance and product security-related inquiries.6. Oversee the Freshworks HackerOne Bug Bounty program (https://hackerone.com/freshworks).7. Evaluate security tools.8. Contribute to the InfoSec roadmap and sprint planning.9. Manage the InfoSec team, including hiring responsibilities.

San Mateo, California, Us

1. Conducted thorough threat modeling for the AWS cloud environment and identified Layer 7 attack vectors applicable to the Freshworks stack.2. Implemented the AWS Web Application Firewall (WAF) and validated the correctness of the WAF rules to mitigate false positives.3. Secured AWS services, identified misconfigurations, and applied hardening and security best practices.4. Ingested log sources into Splunk using various approaches, such as generic S3 and SQS-based S3, and audited the log input correctness and performance.5. Developed comprehensive Splunk and Sumo Logic rules to detect Layer 7 attacks and AWS threat scenarios, utilizing data from Elastic Load Balancing (ELB), WAF, AWS CloudTrail, and Rails application logs.6. Wrote effective threat detection rules for the Kubernetes environment.7. Analyzed AWS CloudTrail, ELB, and Flow Logs using bash scripts or Amazon Athena during security incidents.8. Managed incident response and documented detailed root cause analysis.Worked on the Cortex XDR (Endpoint Detection and Response) solution to handle network and endpoint security incidents.9. Optimized security rules, reducing false positives and alert fatigue to a considerable extent.10. Prepared SOC (Security Operations Center) alert metrics and reported them to the Information Security management team.11. Managed sprint discussions and contributed to the quarterly goal-setting process.12. Mentored team members, sharing knowledge and best practices.

San Mateo, California, Us

1. Web application penetration testing.2. Security testing RESTful APIs3. Completely owned OSINT activity looking for Freshworks sensitive information.4. Handled third-party vendor security assessment of Freshworks products.5. Handled Freshworks responsible disclosure program and private bounty program: https://www.freshworks.com/security/responsible-disclosure/6. Recruited engineers for the Freshworks security team.7. I moved to the Cloud Security Operations team in April 2020 to work on some excellent project initiatives and maturing the SOC operations.

San Mateo, California, Us

1. Web application penetration testing.2. Engaging with Freshworks customers for security-related queries.3. Training Freshworks QA / Developers in OWASP Top 10 threats, thereby enabling them to perform primary security test cases using Burpsuite on their own.4. Conducts Onboarding security sessions for New Joiners5. Involved in the first "ISO 27001" compliance certification for Freshworks and gathered required documents by coordinating with multiple teams.

Dublin 2, Ie

1. Trained in SQL, Oracle PL/SQL, forms, and Reports.2. Worked for a Telecom client and managed Operation Trouble Ticket- OTTs using BMC Remedy tool3. Worked with TIBCO operations and Siebel CRM.4. Developing Excel Macros for script automation.5. Used to participate in Bug bounty programs. Found my interest in Security Engineering and I shifted my career.

Salem, Tamilnadu, In

Sona Programming Club (SProC) was exclusively for the students of Sona college of technology. The club focus on creating interest in programming languages for the students, especially juniors. It teaches varying topics from basic HTML to Working with GitHub repositories. I was the trainer for "Ethical Hacking." related concepts.Responsibilities and topics covered.1. Imparting the importance of Cyber security.2. Teaching basic stuff like changing our IP and MAC addresses.3. Scanning for IP address using Colasoft MAC scanner. 4. Using TOR and proxies for anonymity. Accessing the unblocked websites and deep web. 5. Cracking windows password and ARP poisoning attack using Cain and Abel6. SQL Injection attack using Havij.7. Live demonstration of Prorat, Keyloggers, and DDOS attacks using LOIC.8. Hosting phishing webpages in 000webhost.9. Google Hacking Database

Bachelor'S Degree, Information Technology

Application Security, Ethical Hacking