Experience

Esper

• United States
• Software Development
• 100 - 200 Employee

• DevSecOps Engineer

  • Nov 2021 - Present

  Bengaluru, Karnataka, India ● Adding Security tools to Pipeline and performing SCA, SAST, DAST and Image Scanning. ● VAPT for Web Application, Mobile Application and API(s) and suggesting remediation to Developers & Clients ● Threat Modeling for any significant changes occurs in application and reporting it. ● Actively doing secure code review before every release. ● Implemented tools for secure code such as ● Deployed Secure Development pipeline in Jenkins as well as in AWS CodePipeline. ● Worked on… Show more ● Adding Security tools to Pipeline and performing SCA, SAST, DAST and Image Scanning. ● VAPT for Web Application, Mobile Application and API(s) and suggesting remediation to Developers & Clients ● Threat Modeling for any significant changes occurs in application and reporting it. ● Actively doing secure code review before every release. ● Implemented tools for secure code such as ● Deployed Secure Development pipeline in Jenkins as well as in AWS CodePipeline. ● Worked on principles of least privilege, access appropriate to role, and Role Based Access Control. ● Hardening of Infrastructure Security. ● Experience with common information security management and control frameworks ISO-27001, PCI-DSS and SOC2. ● Lead and participated in Security Reviews, Audits, Risk Assessments, Vulnerability Assessments. ● Experience in the introduction of Infrastructure-as-Code (IaC) and Policy-as-Code (PaC). ● Hands-On with endpoint security tool Okta. ● Protected internal application by implementing authentication and Firewall protection through Cloudflare (Zero Trust Networks) Show less



In Time Tec

• United States
• Software Development
• 700 & Above Employee

• Cyber Security Engineer

  • Jul 2020 - Nov 2021

  Performed VAPT for web application, mobile apps and printer apps of different reputed clients. Performed risk and vulnerability assessments and provided results and recommendations to senior management. Lead project where Team create SIEM solution from scratch all from open source technology using ELK. Conducted security audits to identify vulnerabilities. Cyber Security Awareness among the organization. Have hands on experience in IDS/IPS security Onion

• Cyber Security Engineer trainee

  • Jan 2020 - Jun 2020

  Jaipur, Rajasthan, India