JAKKULA S

Over 8+ years of professional expertise as a Technical Security Analyst, specializing in application security engineering. In-depth knowledge and hands-on experience with OWASP Top 10, WASC Threat Classification, and advanced skills in SAST and DAST and IAST methodologies. Demonstrated leadership in application security analysis, working with major clients and coordinating with software development teams to enhance security postures. Profound understanding and application of compliance standards like PCI DSS and HIPAA, ensuring regulatory adherence across diverse client environments. Expert in conducting comprehensive vulnerability assessments and penetration tests for web and mobile applications, utilizing tools like Burp Suite, Kali Linux, and Metasploit. Developed and implemented robust security testing pipelines in Jenkins, enhancing code review and penetration testing processes. Proficient in network security practices, employing tools such as NMap and Nessus for effective network scanning and vulnerability detection. Advanced skills in threat modeling and security control development, contributing significantly to project security from initial design phases. Extensive experience in integrating security practices into various SDLC methodologies, including Waterfall, Agile, CI, and CD. Implemented and managed IBM AppScan for enterprise-wide security analysis and automation, showcasing proficiency in enterprise security solutions. Strong capability in Secure SDLC practices, ensuring thorough source code analysis and security integration in web-based applications. Exceptional ability to handle multiple tasks simultaneously, displaying strong independent working skills as well as effective team collaboration. Skilled in applying industry-standard security frameworks and systems, including CWE, CVSS, and CVE, for accurate vulnerability assessment and management. Proven track record in delivering detailed security assessment reports, offering clear remediation strategies and effectively communicating findings to stakeholders. Outstanding oral and written communication skills, complemented by superior negotiation and problem-solving abilities, facilitating effective security solutions and team management.

• Specialized in Web Application Firewall (WAF) configuration and management, particularly with tools like AWS WAF and Cloudflare
• Proficient in securing container environments, including Docker and Kubernetes, for safe orchestration and deployment
• Utilized automated security scanning tools in CI/CD environments, such as SonarQube and GitLab CI, for early identification and remediation of security issues
• Conducted security training and awareness programs for development teams to instill a culture of security best practices
• Experienced in API security testing and validation using tools like Postman and SoapUI
• Implemented secure code repositories using Git and SVN, ensuring source code integrity and security
• Developed custom security scripts and tools for automating security testing and enhancing efficiency
• Led the adoption of secure coding standards across development teams, aligning with OWASP and CERT guidelines.