Experienced Security engineer with full-stack development and automation skills. I have played multiple roles such as security trainer, SME of security tools, incident response etc. With a master degree in Computer Science and software development background, I can be an instrumental part in integrating security with SDLC.
As a part of the SecureCode Team in Corporate Information Security, I am helping Nike developers ship secure software. Our team is responsible for all of SCA/SDLC at Nike. Following are my contributions,
- Authored challenges and organized multiple CTF events to train developers on security
- Developed plugin for vulnerability management software to accept results from other tools
- Subject Matter Expert for component lifecycle management tool
- Architected automated layer for security tools to handle scans, logs and results
Developed ASP.NET Web API2 with frontend using Javascript for measuring the password strength.
Assembled and conducted internal-global phishing campaign using open source phishing framework GoPhish.
Redesigned ISO27001 risk assessment template to suit company’s risk management program
By working directly under the CISO of the company, explored new dimensions of information security and enterprise security management.
Worked on the development of an enterprise content management software, "Content Locker" in Windows platform.
Stabilized the product by improving key handling for files and database to improve information security.
Worked on the migration handling of the product in multiple releases.
Working from the initial stages of the product, helped me in understanding the design pattern and object orientated design in depth.
GPA: 3.80
GPA: 8.4/10
Apart from being a Security Engineer, I enjoy event management the most. Hosting CTF events is my passion as it is a fun and gamified way of teaching security to developers.
Apart from that, I have hiked Himalayas, been a Science and Tech reporter and an avid watcher of Mr.Robot