Rama Krishna

About Rama Krishna

I have 9 years of Experience in VAPT, I do Pentesting on Web apps, Mobile apps, Thick…

Experience

1. Senior Security Engineer

   Truist

   Apr 2024 — Present · New York, NY, US

   Performing security analysis and identifying possible in the key derivation function, create vulnerability Assessment report detailing exposures that were identified, rate the severity of the system & suggestions to mitigate any exposures & testing known vulnerabilities. OWASP Top 10 Issues identifications like SQLI, CSRF. XSS, Path Manipulation. Had experience in working on checkmarx and container scanning. Perform grey box, black box testing of the web applications. Create written reports, detailing assessment findings and recommendations. Found web site security issues (XSS, CSRF. session fixation, SQL injection information leakage, application logic etc.) across. Experience in reverse Engineering of Native Mobile Application and Network scanners. Controls on session management like Server-side session states, session termination, Session ID randomness, expiration, Unique tokens, concurrent logged in session, session fixation prevention. Perform Static assessment of various applications by Static code analyzers like HP Fortify. Perform Dynamic assessment of applications by HP Fortify and verify false positives. Develop threat modeling framework (STRIDE, DREAD) for critical applications to identify potential threats during the design phase of applications. Performed static code reviews with the help of automation tools Veracode and Checkmarx. Perform the penetration testing of mobile (Android and iOS) applications, specifically, APK reverse engineering traffic analysis and manipulation, dynamic runtime analysis. Execute daily vulnerability assessments threat assessment mitigation and reporting activities to safeguard information assets and ensure protection has been put in place on the systems.

Education

• Saint Peter's University

  Master's degree

  2022 — 2023