Charitha K

About Charitha K

DevOps Engineer with over 9 years of experience specializing in Linux administration…

Experience

1. Devsecops Engineer

   GE Aerospace

   Jan 2023 — Present

   SAST, DAST, AVA(Application Vulnerability Assessment), EVM (Enterprise Vulnerability Management) to the application teams with addressing and fixing the vulnerability reports based on Critical, High and Medium before every release. Building POC’s, implementation strategies and solutions for Application and Container security tools and implementing Application CI/CD pipelines through container technologies and Shared libraries which are used for automating the DevOps Pipelines. Providing technical guidance and coaching various app teams around the organization on Secure CI/CD process, methods and tools. Creating Docker containers for the Security tools and other build methods which involve DevOps pipelines where the Application teams can easily consume these containers into their environments. Responsible for developing new cloud infrastructure solutions and maintaining existing Infrastructure in a fast paced and agile development environment using the latest software development technologies and infrastructure. Analyzing and building implementation strategies for security tools like Checkmarx(SAST Scan), Qualys(DAST Scan), Palo alto network’s Twistlock(Container Security), Propel(OSS Scan) to current and newly developed application and build environments. Implementing Container scanning solutions using Twistlock (Prisma Compute) tool. Automating Twistlock scanning in build pipelines to scan the images in the premature environment, so that when the containers are in the production environment, they can avoid intrusion from malware. Integrating Checkmarx scan as part of daily scans in each pull request so that vulnerabilities are identified much earlier. Building POC’s in Jenkins, working on OSS scans, CICADA and AWS codebuild and getting teams engaged with the library scans.