saravanan gunasekaran

senior cyber security consultant

About

Total 6+ Years of experience in Vulnerability assessment and penetration testing.  Deep Exposure to Ethical Hacking.  Automated as well as Manual VAPT for web, mobile and network.  Web vulnerability tools like AppScan [IBM], Acunatix, Nessus, Metasploit.  Proxy tools like Burp Suite, and Paros.  Port scanner like Nmap tool.  Web site crawler tools like Screaming Frog.  Firefox add-ons like Tamper data, SQL inject me, Firebug and web developers tools.

Country

india

City

bengaluru

Industry

information technology and services

Skill

web application security, penetration testing, mobile security, network security, forensic analysis, owasp, pci dss, sans top 25, vulnerability assessment, kali linux, information security, rational appscan, manual testing, metasploit, nmap, testing

Experience

associate

cognizant technology solutions

2016-8 - 2018-6 · 1 yr 11 mos

* Managing a team of five members in offshore and coordinating with onsite team. * Verifying the security of the application and all network components along with the verifying other security parameters including physical security controls. * Consultation on secure designing of the application. * Conducting Risk Assessment for application. * Evaluating and proposing new security tools to the CS team. * Working with middle level management to create security policy and incident handling policy. * Conducting security awareness training. * Writing automation scripts to reduce the manual efforts. * Conducting Info Sec Audits * Conducting vulnerability analysis and penetration for web and mobile application. * Defect review and classification with assignment of severity. * Working with developer to fix the vulnerability.

software engineer

robert bosch engineering and business solutions ltd.

2015-6 - 2016-7 · 1 yr 2 mos

* Verifying the security of the application and all network components. * Consultation on secure designing of the application. * Conducting Risk Assessment for application. * Evaluating and proposing new security tools to the management. * Conducting vulnerability analysis and penetration for web and mobile application. * Defect review and classification with assignment of severity. * Working with developer to fix the vulnerability.

web application security testing engineer

stqc

2012-2 - 2014-12 · 2 yrs 11 mos

* Performing Web application security testing following OWASP standards for various e-Governance and government application . * Test Plan, Test Case and Test Scenario development. * Test Design and Execution * Defect review and classification with assignment of severity. * False positive analysis for tool reports. * Summary Report preparation and Verification. * Working with client to fix the vulnerability

associate consultant

sisa information security

2014-12 - 2015-6 · 7 mos

* Implementing PCI DSS for organizations * PA-DSS Certification for applications * Performing Application (Web / Mobile / Network) Penetration Testing following OWASP and PCI Guidelines. * Handling end to end delivery of Application PT Services * Leading the Application PT Team * Performing Static, dynamic and forensic analysis * Test Plan, Test Case and Test Scenario development * Test Design and Execution * Defect review and classification with assignment of severity. * False positive analysis for tool reports. * Summary Report preparation. * Working with client to fix the vulnerability