Laharikrishna N

About Laharikrishna N

Experienced cybersecurity professional with 7+ years of expertise in IT security. Proficient in security testing of web applications, network infrastructure, vulnerability assessment/management, External attack surface analysis, and threat management, with a strong understanding of information technology. Web Application Security:o Expertise in DAST (Dynamic Application Security Testing) using tools like Rapid7 Insight AppSec, Qualys, and Nessus to identify, validate, and remediate vulnerabilities in web applications.o Skilled in black-box and grey-box testing to identify vulnerabilities and validate security measures.o Proficient in identifying OWASP Top 10 and SANS 25 vulnerabilities. Penetration Testing:o Performed penetration testing for web applications and network infrastructure utilizing various reconnaissance and attack parameters.o Expertise in manual vulnerability analysis to identify and exploit security flaws in web applications and network environments. Vulnerability Assessment/Management and reportingo Hands-on experience with vulnerability management processes including appliance scanning, vulnerability scanning, validation, and remediation.o Proficient in analyzing vulnerability data from multiple sources such as CMDB, Rapid7, and Qualys. Tools, Platforms, & Frameworks:o Experienced with (VA) tools like Rapid7, Nexpose, Nessus, Qualys modules including VMDR, VRM, Service Now, Cloud Agent, Policy Compliance, and On-Prem Scan Engines.o Proficient in both commercial and open-source tools such as Burp Suite, Metasploit, Kali Linux, AppScan, SSLScan, SonarQube, Nmap, SQLMap, OWASP ZAP, Forcepoint DLP.o Expertise in attack surface management using platforms like Bitsight, Microsoft EASM, Crowdstrike Exposure Management, and ISS Security - Corporate. OSINT (Open-Source Intelligence):o Proficient in gathering open-source intelligence (OSINT) for reconnaissance and vulnerability assessment. Basic Programming and Scripting Languages:o C, C++, Basic Java, Python, and other scripting languages for automation, vulnerability analysis, and tool development.

Experience

1. Sr Cyber Security Engineer Vulnerability Assessment and Management Penetration Testing

   Tata Consultancy Services

   Feb 2023 — Present

   Web Application Security:o Expertise in DAST (Dynamic Application Security Testing) using tools like Rapid7 Insight AppSec, Qualys, and Nessus. SAST (Static Application Security Testing) to identify, validate, and remediate vulnerabilities in web applications. SCA (Software Composition Analysis) Security.o Skilled in black-box and grey-box testing to identify vulnerabilities and validate security measures.o Proficient in identifying OWASP Top 10 and SANS 25 vulnerabilities, Knowledge on Threat modelling (STRIDE). Penetration Testing:o Performed penetration testing for web applications and network infrastructure utilizing various reconnaissance and attack parameters.o Expertise in manual vulnerability analysis to identify and exploit security flaws in web applications and network environments. Vulnerability Assessment/Management and reportingo Hands-on experience with vulnerability management processes including appliance scanning, vulnerability scanning, validation, and remediation.o Proficient in analyzing vulnerability data from multiple sources such as CMDB, Rapid7, and Qualys. Tools, Platforms, & Frameworks:o Experienced with (VA) tools like Rapid7, Nexpose, Nessus, Qualys modules including VMDR, VRM, Service Now, Cloud Agent, Policy Compliance, and On-Prem Scan Engines.o Proficient in both commercial and open-source tools such as Burp Suite, Metasploit, Kali Linux, AppScan, SSLScan, SonarQube, SCA tools (Snyk, Blackduck, OWASP dependency check), Nmap, SQLMap, OWASP ZAP, Shodan, Forcepoint DLP.o Expertise in attack surface management using platforms like Bitsight, Microsoft EASM, Crowdstrike Exposure Management, and ISS Security - Corporate. OSINT (Open-Source Intelligence):o Proficient in gathering open-source intelligence (OSINT) for reconnaissance and vulnerability assessment.

Education

• Visvesvaraya Technological University

  Master of Computer Applications - MCA, Computer Science

  2016 — 2018

• Government Science College Chitradurga

  Bachelor of Science - BSc, science

  2013 — 2016