Basavaraja Kattigehalli

About Basavaraja Kattigehalli

21+ years hands-on experience in the field of Information security in Enterprise…

Experience

1. Senior Information Security Architect

   Akamai Technologies

   Mar 2022 — Present

   Security architecture review and overall security posture of products and operating environments. • Conduct periodic vulnerability testing of products, platforms, and systems to identify any weaknesses which may pose risks to the customer or company. • Product security design guidance and security architecture reviews. • Develop and implement an application threat modeling process for use in managing overall risk for products and services. • Serving as a subject matter expert during incidents and remediation. • Configure and maintain a suite of security testing tools for the business unit, to include: vulnerability updates, scope, scan policy creation, report generation and integration to dashboards. • Preparation and representation in technical readiness review in preparation of releases. • Working collaboratively with development teams on secure design and development choices. • Penetration testing to validate security gaps and provide remediation guidance. • Defining the overall scope and set clear guidelines for the vulnerability management policy. • Collaborative work to drive remediation efforts across Development, QA, Operations, Product management and Engineering teams. • Engagement with an external security testing firm to perform various levels of adversarial security testing. • Providing guidance and answering questions about security practices. • Establishment of vulnerability review board to provide visibility, remediation guidance, SLAs, and exceptions. • Develop security assessment tools, technologies and methodologies including: Vulnerability Scanning, WebApp Testing, AppSec Penetration Testing, Risk Assessment Frameworks • Identifying, researching, validating, and exploiting various security vulnerabilities. • Maintain vulnerability testing evidence in support of various regulatory compliance requirements across products, services, and platforms. • Identifying application security gaps and weaknesses. • Security tool deployment and administration.

Education

• Visvesvaraya Technological University

  Bachelor's Degree, Information Science & Engineering

• Syracuse University

  Master’s Degree, Computer Engineering (Security and Assurance)

Skills

• Availability
• Data Warehousing
• Wpscan
• Windows
• Confidentiality
• Threat & Vulnerability Management
• Software Quality Assurance
• Fortify
• Intrusion Detection
• Penetration Testing
• Owasp
• Information Security Management
• Oracle
• Webinspect
• Wsfuzzer
• Vulnerability Scanning
• Authentication
• Software Development
• Nexpose
• Threat Assessment
• Technical Leadership
• Shell Scripting
• Vulnerability Assessment
• Fuzzing
• Sqlmap
• Security
• Wireshark
• Unix Shell Scripting
• Cryptography
• Etl
• Databases
• Android Development
• Security Audit
• Authorization
• Bmc Remedy
• Data Loss Protection
• Python
• Nessus
• Unix
• Security Policy Development