Kamran F.
Product Application Security Engineer @News Corp
Signup · Get unlimited contacts
WORK HISTORY
Product Application Security Engineer @News Corp
Uplifted and maintained secure posture of over of News Corp application ecosystemPerformed security reviews, code reviews, code scans and created threat models of our products; identify any security issues and develop guidance and plans to remediateCreated threat modeling framework for critical applications to identify potential threats during the design phase of applicationsDeveloped Application Security program (DAST and SAST) at the enterprise level to identify, report and remediate securityReviewed source code and developed security filters within AppScan for critical applicationsWorked with DevOps teams to automate security scanning into the build processWorked extensively with software development teams to review the source code, triage the security vulnerabilities generated by CheckmarxKnowledge of OWASP TOP 10, CWE Top 25, explained the mitigate strategies and how to resolve the issues to developers.Facilitated penetration tests and code reviews for applications by working with the application teams and pen testers.Validate and triage vulnerabilities submitted by researchers from the News Corp bug bounty programHelp proliferate the use of automated security tools into the CI/CD pipelines to identify security issues quicklyConstructed Static and Software Composition Analysis tools such as Checkmarx and Snyk, and their implementation within CICD build pipelines.Use of container technologies (Docker/Kubernetes etc) and cloud servicesDeveloped on modern web application security practices and trendsDev tools experience (Github, Terraform, Bamboo, Jenkins, etc.)Working knowledge of common and industry standard cloud-native/cloud-friendly authentication mechanisms (OAuth, OpenID, AWS IAM)Reviewed code for security vulnerabilities and practices dangerous to security and privacyManaged security integration into the CI/CD pipeline Managed integration with manual and automated tools for static and dynamic testing
EDUCATION
Purdue University - Office of the Vice Provost for Graduate Students and Postdoctoral Scholars
Master of Science - MS, Cybersecurity Management
The University of Texas at Arlington
Bachelor of Science (B.S.), Computer Information Systems
SKILLS
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.