Dhiraj Ingale

About Dhiraj Ingale

I am a versatile and driven software engineer with a diverse background that bridges…

Experience

1. Project Engineer

   Cdacindia

   May 2022 — Present · Mumbai, IN

   Developed a Java application using Spring Boot, Thymeleaf, Maven and PostgresSQL, successfully deploying it on Apache Tomcat, ensuring high performance and secure configurations Led secure code reviews, focusing on input validation and access control mechanisms, to ensure adherence to security best practices and minimize vulnerabilities Conducted manual code reviews following OWASP guidelines, identifying and remediating critical security flaws in the development lifecycle Performed security testing using Burp Suite to identify access control vulnerabilities like IDOR and Privilege Escalation in web applications, contributing to improved access control security Performed Static Application Security Testing (SAST) scans using SonarQube for 150+ microservices in application Developed in-house custom SonarQube rules to address 35-40% of security issues related to unvalidated user inputs, automating a manual review process and saving approximately 2 man-years of effort Developed a Java-based tool to scan for hardcoded secrets in source code, enhancing the security posture by preventing the accidental exposure of sensitive information. Implemented HashiCorp Vault for secure secrets management, streamlining the storage and retrieval of sensitive credentials, and improving overall security compliance Facilitated developer-focused training sessions to promote secure coding practices and strengthen application security across development teams Assisted multiple developers and teammates in troubleshooting and error resolution