Ranganath M P

About Ranganath M P

Over the course of 8+years of experience, my career has been centered around software development. However, my current role has broadened my expertise to include both development and penetration testing. This dual focus enables me to not only build robust software systems but also assess and enhance their security, ensuring a holistic approach to software development and cybersecurity.As an experienced Information Security Analyst, I possess a strong foundation in the Application Security and Secure Code Review. My competencies extend to performing Web application penetration testing, evaluating API security, and Security Review.

Experience

1. Penetration Tester

   IBM

   Present

   Conducted thorough penetration tests on web applications, identifying exploiting vulnerabilities such as SQL injection, XSS, CSRF, and more. Utilized industry-standard tools and methodologies, including OWASP Top Ten, to assess the security of web applications. Collaborated with development and IT teams to assess and validate security findings and prioritize remediation efforts for web application vulnerabilities. Conducted security assessments of APIs and web services integrated into web applications. Evaluated the effectiveness of web application firewalls and other security controls in place. Familiarize yourself with the security features and configurations of AWS and Azure environments. Practice deploying and securing services such as virtual machines, containers, databases, storage solutions, and networking components within AWS and Azure. Learn about Identity and Access Management (IAM), network security groups (NSGs), encryption, logging, monitoring, and compliance frameworks specific to AWS and Azure. conducting penetration testing and vulnerability assessments in AWS and Azure environments. Test for common cloud-specific vulnerabilities such as misconfigurations, insecure storage settings, privilege escalation, and exposure of sensitive data in AWS S3 buckets or Azure Blob Storage. Understand the shared responsibility model in cloud security and focus on assessing the security controls and configurations managed by the cloud provider.

Education

• Sri Sairam Engineering College

  Engineer's degree, Electrical, Electronics and Communications Engineering

• Shirdi Sai Engineering College

  Electronics & Communications Engineering

• Vidhya jothi school

  Bachelor of Engineering - BE, Electrical, Electronic and Communications Engineering Technology/Technician