IdentityHaving 5+ years of professional experience in Information Technology, currently working in the field of Vulnerability Assessment and Penetration testing with experience in both manual and automation with strong technical, analytical, and organizational skills.
Penetration Testing of Internet facing assets, with good understanding of applicationvulnerabilities assessment and remediation.
Strong understanding of ethical hacking techniques to assure application security.
Very Good knowledge of OWASP top 10 vulnerabilities and its impact on security of webapplications.
Good knowledge on Man in the Middle attack, CSRF, Cross-Site Scripting, Privilege Escalation, Session
Fixation, Session Hijacking, Clickjacking, IDOR, Directory traversal, Remote File Inclusion and Local File
inclusion.
Good knowledge on basic Networking concepts.
Good knowledge on Encryption, Hashing, DMZ, HTTP, HTTPS, TCP & UDP Protocols as wellas SSL
Handshake.
Good understanding on API testing and Network Penetration testing
High flexibility and adaptability to new technologies.
Performed Web Application pen testing with tools like Burp suite and through manualexploitation.
Found common web site security issues (XSS, CSRF, session fixation, SQL injection,information
leakage, application logic etc.) across various platforms.
Hands on knowledge to identify false positive issues and Manual assessment to identifyfalse negative
observation.
Analyze vulnerabilities, perform an impact analysis and risk mapping as per OWASP Top10 standard.
Excellent problem-solving skills with strong technical background having the ability tomeet deadlines
and quick learner of new technologies and skills.
Good verbal communication skills with proven ability to attend client meetings scheduledon weekly basis
and ad-hoc meetings whenever required.
Area of Expertise
Ethical Hacking
Web Application Testing
IT Skills
Programming Languages (Basics): HTML, Javascript
