Responsibilities-

As a Senior Product Security Engineer, I am deeply involved in advancing product security and elevating security programs. My role focuses on enabling development teams to enhance the security of their applications and infrastructure throughout the software development lifecycle, thereby safeguarding millions of users globally.

• Security Tool Automation: Spearheading the development and implementation of automated security tools to streamline and enhance security processes.
• Security Architecture Review:Conducting thorough evaluations of platform and service designs to ensure robust security architecture.
• Engineering Team Empowerment:Actively working with engineering teams to integrate security best practices into their development processes.
• Collaborative Security Uplift:Partnering with security teams and leadership to drive improvements in our security programs.
• Project Leadership and Mentorship:Leading significant security projects from inception to execution while mentoring fellow security engineers.
• Stakeholder Engagement:Serving as a subject matter expert for stakeholders and engineering teams, guiding them in security-related matters.

DevSecOps and Security Automation:

• DevSecOps Integration: Implementing DevSecOps practices to ensure secure continuous integration and deployment.
• Security Pipeline Development:Creating security pipelines for automated code analysis and vulnerability assessment.
• Infrastructure Security:Applying security best practices in 'Infrastructure as Code' environments.
• Automated Security Incident Response:Developing automated responses for common security incidents.

Responsibilities-

• Apply security, risk & compliance management & risk management methodologies and conduct web application vulnerability assessment and threat modeling, secure code reviews on the applications
• Perform source code review in Java, .Net & Python to find out the errors, and review information security solutions requirements & mitigation techniques
• Emphasise on both manual & automated security testing for web, mobile applications based on OWASP
• Manage vulnerability assessment, patch & penetration testing using Metasploit, Burp Suite, DirBuster, OWASP ZAP proxy, NMAP, Nessus, SQL Map, Kali Linux & Wireshark tools
• Orchestrate static application security testing & dynamic application security testing for projects
• Respond to client queries on cyber security practices & compliance mapping requirements

Responsibilities-

• Provided information security and threat management for the Healthcare Domain, and implemented cyber security protocols for the organization
• Analysed network data & system, designed & implemented security solutions infrastructure, and provided engineering support to operate critical mission services
• Coordinated with analysts & designers for producing detailed specifications to secure data & maintain privacy
• Tested various applications, performed penetration testing, and crosschecked vulnerabilities before going live
• Prepared reports on security breaches, and maintained the smooth running of the systems after successful installation

Responsibilities-

• Played a vital role in accomplishing a project for WPP, consisting of 400 child companies
• Provided solutions through best server securing methods to the clients with complex technical issues
• Offered support & solutions for better output structure under pre-determined service level agreements
• Managed on-boarding process & provided training to the junior tech support specialists
• Worked with resolver groups on L1 support for security