Himanshu Gupta

About Himanshu Gupta

As a CISSP-certified Security Architect with over 9 years of experience, I specialize in…

Experience

1. Cyber and Digital Security Specialist

   Nestlé

   Mar 2021 — Present

   Key Areas- Security and Compliance by Design - Security Architecture Reviews - Application Security Testing - Azure - Consumer IoT • Security architecture design review, security consulting, information privacy. • Threat modelling, security design, risk & compliance, vendor assessment, RFP reviews and scoring. • Providing end-to-end solution from security perspective to ensure sensitive data is protected all the time for all B2B and B2C use cases for its entire journey. • Given recommendations to the application owner/developers on the best security practices /approach for developing any new applications. • Ensuring Secure SDLC, Application Security aspects, Infrastructure Security aspects. • Ensuring solutions are compliant to security policies and standards. • Ensuring Compliance and Regulatory requirements are met; PCI DSS, SOX, GDPR etc. • Analyzing the result of SAST & DAST scans and providing to the product team to understand the severity of vulnerabilities and remediation approach. • Involved in threat and risk analysis of applications. • Validating the vulnerabilities based on the requirement if any false positive challenge comes from the product team or Bug bounty program through manual and automation approach. • Handling the compliance requirement for the web application for EMEA region as per the Nestle security standard. • Collaboration with other security leaders to drive compliance, identifying and implementing improvement areas. • Ensuring that the application security and cyber protection teams can support technology (Cloud platforms, engineering, and application domain specialists) with timely and expert security advice aligned to policy, control frameworks, and threat assessments. • Security architecture review of Consumer IoT solutions. • Knowledge and expertise on Consumer IoT. • Security review of technical roadmap of Nestle IoT platform.

Education

• Centre for Development of Advanced Computing (C-DAC)

  Post Graduate Diploma, IT Infrastructure, Systems and Security (PG-DITISS)

  2015 — 2016

• Dr. A.P.J. Abdul Kalam Technical University

  Bachelor’s Degree, ECE

  2010 — 2014

Skills

• Openvas
• Linux
• Leadership
• Team Management
• Windows Server
• Network Security
• Ndc
• Management
• Cyber Se
• Windows
• Firewalls
• Network Administration
• Web Application Security
• Metasploit
• Python
• Pki
• Information Security
• Vapt
• Owasp
• Wireshark
• Burp Suite
• Penetration Testing
• Networking