Deepak Panchal

About Deepak Panchal

Good knowledge in Various technical assessments. Information Security Evangelist with…

Experience

1. Security Researcher

   Secure Minds

   Mar 2020 — Present

   Good knowledge in Various technical assessments. Possess Offensive Security Certified Professional (OSCP) and Information Security Evangelist with deep understanding of Web, Android, IOS Application Security Assessment Techniques. Possessing the skills to perform Automated as well as Manual Vulnerability Assessment and Penetration Testing along with the abilities to provide code-level remedies to fix the open gaps. Well versed with the Application Development / Designing process required to perform Automated and Manual Source Code Reviews. With strong communication skills to be able to present the observed vulnerabilities to the hierarchy of authorities. Always a security learner. Working in the Secure Minds and taking care of all security assessments such as•Vulnerability Assessment and Penetration Testing (Internal and External) of servers, network devices, and endpoints. Prioritization of reports and sharing it •Application Security - Carrying out Application Security which includes Web Application, Android Application, IOS Application, and API.•Bug bounty – Work as Bug Bounty hacker, interest in finding external security issues•Security Training - Conducting security training for clients. Training includes: Secure Coding Practice, Security in Cloud, Infrastructure Security, and DevSecOps•Source Code Review - Conducting Source Code Review of Applications using Open Source Tools such as Sonarqube and other tools such as HP Fortify•Wireless Security Assessment - Conducting Wireless Penetration Testing of Wireless Network•RBI Audit- Managing the technical requirements for RBI Infosec Audit and tracking and closure on RBI Advisories and Alerts raised.•Infusing security in SDLC and ensuring security sign-off to releases•Conducting and driving POC of various security tools such as HP Fortify, Checkmarx, Nessus, Qualys, etc.•Cloud Security -Security review of AWS infra