Experienced and motivated cyber security specialist with 16+ years of expertise. Skilled in Application Security, Penetration Testing, Secure Code Reviews, Vulnerability Management, Risk Assessments, and Security Leadership and a proven history of driving cyber security achievements.
Leading the Synapxe penetration testing program, I manage a group of security engineers and conduct penetration testing, security architecture reviews, cloud security assessments, and code reviews, including red team engagements.
In collaboration with the Security Engineering group, I contribute to enhancing the Secure Product Life Cycle and drive impactful Security Innovation and Research projects.
My responsibilities also include shaping security policies and procedures, establishing a robust security testing framework, developing security metrics, and conducting technical security assessments to meet compliance needs.
I work closely with cross-functional teams, including Product and Business teams, the Risk and Compliance team, and the SOC team, on various product security initiatives and risk management.
Technical Lead for PayPal's Security Engineering Quality Team, Ensuring application security framework and controls compliance. Conduct vulnerability assessments and penetration testing in alignment with Secure Product Life Cycle requirements.
Responsible for conducting penetration testing on Citi bank applications.
Responsible for conducting penetration testing on Client applications.
Development and testing of attack prevention framework under security engineering practise. Conducting security design reviews & penetration testing.
Conduct Application & Network Vulnerability Assessments, Penetration Testing, and Secure Code Reviews for prominent clients across diverse industries including Finance, Healthcare, Insurance, etc.
Certified Information Systems Security Professional (CISSP) - ID: 975993
Certified Information Systems Security Professional (CISSP) - ID: 975993
Certified in Risk and Information Systems Control(CRISC)
Offensive Security Certified Professional (OSCP)
CREST CPSA (Certified practitioner Security Analyst)
EC-Council Certified Ethical Hacker v8.0 (CEH)
ITIL Version 4.
Completed Splunk fundamental Trainings
Licensed [Job Title] - [Timeframe]