Navlesh Pandey

Cyber Security Engineer @Tata Consultancy Services

Thane, IN

Conducting Application Security and Vulnerability Assessment for various Web Applications based on Telecommunication,Education, Energy, Resources, Utilities (ERUI), Banking & Finance based applications. Performed Vulnerability Assessment and penetration testing (VAPT) of Web & Mobile applications. Identified and exploited various business logic frameworks based on OWASP Top 10 Vulnerabilities, NIST Framework. Developing and maintaining Web App Security Risk assessment, Security Assurance Score and Vulnerability Tracker. Utilizes various Tools such as Burp Suite, Charles Proxy, SpotBugs, Nessus, OpenVAS, Fortify, AppScan as per requirement toconduct Static Application Security and Dynamic Application Security Testing (SAST+DAST). Utilizes the results generated by automated scan and code reviews in the software development process to mitigateidentified vulnerabilities. Design the Vulnerable Code and Secure practice based Codebase to make early prevention of vulnerabilities. Developed Python and Unix based scripts for attack simulation, attack vector integration and automation of VAPT basedtasks such as getting Header Configuration, Cloud configuration review, etc. Maintain Vulnerability Tracker and Remediation portal for identified Vulnerabilities for better communication process. Conducted Application Security of 30+ Web Application and identified 200+ Vulnerabilities in Web/Mobile App. Created Policies in Azure/ AWS Web Application Firewall (WAF) to mitigate from various Vulnerabilities. Helped in integration of Microsoft Security Benchmark like RaMP, Secure Score and Defenders with existing resources. Conducted and participated in Organization wide Software Security Trainings & Internal Audits.