Ravi Gollapudi

About Ravi Gollapudi

17 years of total experience in software including 9 years securing the Online Services and Line of Business (LOB) applications developed at Microsoft. Responsible for ensuring Software Security Complaince as per Microsofts Security Policy, Standards and Best Practices. Our Security program is aimed 1. to Decrease the count of Security bugs appearing late in the development cycle and 2. to Reduce the Risk caused by application. Hence, for achieving Applicaiton Software Assurance I am responsible for providing the following services.1. Security Program Management2. Operational Security Reviews (OSR)3. Final Security Reviews (FSR)4. Penetration Testing5. Application Security6. Risk Assessment7. Threat Modeling8. Security Design Review9. Security Code Review10. Complaince: SOX, PCI, HIPAA, GLBA, FISMA etc.Specialties: 1. Has vast experience in Penetration Testing of Web Applications for the attacks / vulnerabilities published in OWASP.2. Expert in reviewing code on all technologies of Microsoft like, ASP.NET, C#, VC++, COM, VB, Share Point (MOSS), AJAX and other technologies like JAVA, Siebel, Clear basic etc.3. Constantly updating myself on new attacks and vulnerabilities.

Experience

1. Lead Security Engineer

   Salesforce

   Feb 2022 — Present

Education

• Osmania University

  BSc, Mathematics, Physics and Computer Science

  1995 — 1998

• University of Hyderabad

  MSc, Mathematics and Computing

  1998 — 2000

Skills

• Security Management
• Risk Assessment
• Visual C++
• Software Development
• Cissp
• Windows Azure
• Fisma
• Integration
• Threat Modeling
• Payment Card Industry Data Security Standard (Pci Dss)
• Data Center
• Software Development Life Cycle (Sdlc)
• Application Security
• Vulnerability Management
• Security
• Enterprise Architecture
• .net Framework
• C#
• .net
• Com/Dcom
• Owasp
• Security Program Management
• Windows Security
• Wcf
• Program Management
• Microsoft .net
• Pci Dss
• Computer Security
• Security Policy
• Sdlc
• Security Assessments
• Firewalls
• Cloud Computing
• Security Development Lifecycle
• Information Security
• Sql Azure
• Information Security Management
• Infrastructure Security
• Testing
• Sharepoint