Satyanarayana C.

About Satyanarayana C.

Self-motivated IT security professional extensive experience in Cloud Security, Architecture Reviews, Threat Modeling, Controls Assessment, Vulnerability Assessment, Pen testing(SAST/DAST/SCA/IAST), Application Security, Vulnerability Management, Stakeholder Management(Third party pen-test vendors coordination), Risk Assessment and Risk & Compliance Management• Performing Architecture reviews, Threat modeling, design reviews, Risk Assessment & Risk Management activities for cloud based (In-house or SaaS) and on-premises applications.• Validating Cloud security controls, identifying control gaps, mapping them to cloud risk threat scenarios and managing the risk register, logging defects in GRC tool.• Integrating repositories with SAST, SCA & DAST tools in CI/CD pipelines & automating the scans.• Performing static code, Software composition (SCA) scans and performing the false positive analysis using Checkmarx reference as OWASP Top 10.• Served as the Point of Contact for all web application security related initiatives including but not limited to penetration testing initiation, secure coding best practices, application security improvement strategies, effective and actionable remediation plans, exception process and developer secure training.• Prioritizing remediation efforts based on exploitability, potential business impact and compliance needs.• Documents, assigns, tracks, and maintains identified application security vulnerabilities utilizing the organization’s vulnerability management system.• Works directly with the development teams to provide vulnerability remediation guidance as needed.• Performs post remediation validations through rescans and/or manual source code reviews to determine effectiveness of remediation actions.• Performing compliance scans and Vulnerability Management (VMDR) scans in Qualys.• Steered Application Sensitivity Assessment and Risk Assessment activities.• Having exposure to Microsoft Sentinel, security information and event management (SIEM) and security orchestration, automation, and response (SOAR).• Good experience in Application control testing, IT Audit, SOC2, GDPR, NIST

Experience

1. Senior Associate - Projects

   Cognizant

   Sep 2024 — Present · Hyderabad, IN

Education

• Malla Reddy (MR) Deemed to be University

  Bachelor's degree, Information Technology

  2007 — 2011

• Malla Reddy (MR) Deemed to be University

  Master of Technology - MTech, Computer Science

  2011 — 2013