About

Work Experience

• Information Security Engineer, IDfy

  May, 2024 - Present

  Working as an Information Security Engineer focusing on cloud security, incident response, and DevSecOps integration.

  • Performed VAPT for web apps, APIs, mobile apps, and Wi-Fi networks; investigated phishing incidents and binary threats.

  • Managed external VAPT efforts and coordinated vulnerability remediation with development teams.

  • Supported DevSecOps by integrating SAST, dependency scanning, and secrets detection into CI/CD pipelines.

  • Led threat modeling sessions and risk assessments to strengthen security posture.

  • Investigated and triaged alerts from GCP SCC, WAF, and SIEM; conducted post-incident analysis and implemented long-term fixes.

  • Delivered security awareness training and developed custom automation scripts to enhance operational efficiency.

  • Hands-on experience with GCP security tools and infrastructure.

  • Automated security monitoring workflows to reduce response times and enhance threat detection accuracy.

  • Developed and optimized custom detection rules and signatures for SIEM platforms.

  • Conducted binary security analysis and threat modeling for proprietary products.

  • Experience with DevOps tools including Kibana, GitLab, Argo, and related platforms.

• Senior Executive-Cyber Security, Nangia Co LLP

  Jun, 2022 - Apr, 20241 year 11 months

  Led and managed security assessments for various clients, specializing in vulnerability assessments, penetration testing, and security compliance.

  • Led, Managed Conducted Security Assessments as per client requirement

  • Performed application security assessment of Web applications, Mobile applications, services and API

  • Liaising with the Development and Operations team for closure of vulnerabilities found during assessment phase

  • Conducted configuration reviews for Operating System, Database, Firewall

  • Involved in organizing, planning and managing timelines for engagements as well as re-validation activities

  • Conducted Wi-Fi Pentesting, Network Segmentation testing

  • Conducted vulnerability assessment and penetration testing for internal network, and other infrastructure-DR/DC

  • Re-validated and responsible for tracking status of closure, Resolve client queries via in-person discussions/remote calls

  • Performed dark web monitoring using techniques like dark web search engines and leak forums for leaked information of the organization and communicated findings through detailed reports

  • Performed osint activities using techniques like social media scraping and web scrapping

  • Draft detailed reports on the vulnerabilities observed during assessments

• Intern-Cyber Security, Network Intelligence

  Mar, 2022 - Apr, 20222 months

  Cybersecurity internship focusing on vulnerability assessments, penetration testing, and security configuration reviews.

  • Performed configuration review for firewalls and database servers

  • Run Vulnerability Assessment and Penetration Testing activities of Client Infrastructure- Internal External remotely

  • Conducted Grey/Black Box Application Security Assessment for Web applications keeping business requirement in mind

  • Prepared detailed report for the said performed activities

Skills

Education

Certificates

Awards

Interests