Over 18 years of work experience specialized in enabling information security by balancing both the business needs and the security needs for large organizations. In-Depth experience in implementing strategic security programs which includes security architecture, edge protection, security controls advisory, security assessments (static, dynamic, interactive and penetration testing) and DevSecOps.
Strong technical knowledge in providing guidance to the application development teams to enable secure development process and improve overall security posture of the organization. Additional experience in data security, platform vulnerability analysis, identity management and application development along with strong information security risk management. Watchful professional offering comprehensive, hands-on experience identifying, investigating, and responding to information security alerts. Expertise in searching through data-sets to detect threats and anomalies and administering metrics to maintain security processes and controls. Focused on helping businesses safeguard sensitive data from hackers and cyber-criminals.
DevSecOps
undefinedCISSP
Security Tools
Akamai, Snyk, CheckMarx, Invicti, Crowdstrike, Fortify, AppSpider, Acunetix, Contrast Security, WebInspect, AppScan, ZAP, Burp Suite, Fiddler, Wireshark, Nessus, Nmap, DataVantage Data Masking Tool, IBM Optim, BMC Identity Management suite
Programming
Java, J2EE, Java Frameworks and scripting, PL/SQL, Shell scripting,
Databases
Oracle, MS SQL Server, MySQL
Others
OWASP, NIST, FFIEC, DFS, OpenSAMM, BSIMM