Dharamveer prasad

Application Security Engineer @ Confidential Careers

About

Passionate about protecting digital systems and empowering organizations to stay resilient against cyber threats. With a proven track record in securing sensitive data and critical infrastructure, I specialize in implementing robust security frameworks, identifying vulnerabilities, and responding to real-world security incidents. Over the years, I've helped businesses build secure environments by blending deep technical skills with strategic cybersecurity insight. From vulnerability assessments to firewall hardening, I’m committed to making security proactive, not reactive. Core Competencies: 🔹 Cybersecurity Strategy & Implementation 🔹 Threat Intelligence & Incident Response 🔹 Penetration Testing & Vulnerability Assessment 🔹 Security Policy Development & Compliance 🔹 Encryption Technologies & Data Protection 𝐊𝐞𝐲 𝐄𝐱𝐩𝐞𝐫𝐢𝐞𝐧𝐜𝐞: 𝐀𝐩𝐩𝐥𝐢𝐜𝐚𝐭𝐢𝐨𝐧 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐄𝐧𝐠𝐢𝐧𝐞𝐞𝐫 • Conducted comprehensive security assessments for web and mobile applications, identifying OWASP Top 10 vulnerabilities and business logic flaws. • Integrated security into the SDLC by collaborating with DevOps and engineering teams to Implement DevSecOps best practices. • Performed static (SAST), dynamic (DAST), and manual code reviews using tools like Burp Suite, ZAP, SonarQube, Fortify, and Checkmarx. • Drafted and enforced secure coding guidelines, improving code security awareness across development teams. • Reduced application vulnerabilities by 70% over 6 months through continuous improvement, retesting, and secure development training. • Implemented API security controls and tested for authorization flaws (e.g., IDOR, broken access control, insecure deserialization). • Assisted in setting up WAFs and custom security rules to block exploitation attempts in production environments. • Delivered internal workshops on secure coding, common vulnerability patterns, and bug bounty triage. I use my platform to spread cybersecurity awareness, mentor aspiring professionals, and share practical insights with the community 👋 𝗟𝗲𝘁’𝘀 𝗖𝗼𝗻𝗻𝗲𝗰𝘁! Open to meaningful collaborations and brand promotions 📧 Reach me at: infosecdharamveer@gmail.com

Country

India

City

Mumbai

Industry

Computer Software

Skill

(VAPT), Web Applications, Security Analysis (Securities), Ethical Hacking, Vulnerability Assessment and Penetration Testing (VAPT), Information Security Analysis, Information Security, Cybersecurity, Customer Service, Presentations, English, Management, Leadership, Communication, Programming, Penetration Testing, Project Management, Research, Marketing, Strategy

Experience

Application Security Engineer

Confidential Careers

2023-10 - Present · 3 yrs

Navi Mumbai, Maharashtra, India

* Designing, implementing, and maintaining security measures to protect computer systems, networks, and data. *Conducting regular security assessments and audits to identify vulnerabilities and mitigate risks. * Developing and implementing security policies, procedures, and standards to ensure compliance with regulations and best practices. *Monitoring security events and incidents, investigating breaches, and coordinating responses. *Installing and configuring security software and hardware, such as firewalls, intrusion detection systems, and encryption tools. * Providing technical guidance and support to other teams on security-related issues. * Keeping up-to-date with the latest security threats, technologies, and trends to proactively address potential risks. * Collaborating with stakeholders across the organization to promote a culture of security awareness and accountability.

Cyber crime Investigation member

Cyber Rakshak Trainings & Investigation Center.

2022-8 - 2023-5 · 10 mos

India

* Assisting Investigations: Support ongoing cybercrime investigations by collecting and analyzing digital evidence under supervision. * Research and Analysis: Conduct research on cyber threats, trends, and emerging technologies to assist in developing investigative strategies. * Documentation: Document findings, procedures, and outcomes of investigations accurately and comprehensively. * Technical Support: Provide technical assistance to investigators in digital forensics, data analysis, and cybersecurity tools. * Collaboration: Collaborate with law enforcement agencies, legal teams, and cybersecurity experts to exchange information and coordinate investigative efforts. * Compliance and Ethics: Adhere to legal and ethical standards while handling sensitive information and evidence.

Cyber Threat Analyst

SISTMR Australia

2022-10 - 2023-2 · 5 mos

India

* Analyze security data to identify potential threats, vulnerabilities, and suspicious activities. * Create reports summarizing findings, trends, and recommendations for improving security posture. * Stay updated on emerging threats, attack techniques, and security technologies through research and training. * Maintain accurate documentation of security incidents, investigations, and mitigation efforts.