Savant Jaswal

About Savant Jaswal

I am a Information Security Consultant with ~11 years of experience in information security sector. I believe in getting the task done.Over the period of time I have been associated with different types of projects as mentioned:1) Vulnerability Assessment and Penetration Testing for various technologies such as Web Applications, Mobile Applications, Internal/External networks, Wireless etc - to make the technologies secure2) Network/Application Architecture reviews - to identify gaps in current implementations at high level3) Red team, Simulated Phishing and Breach Readiness Activities - to understand how prepared an organisation is for a cyber attack.4) Incidence Responses - to identify how a particular hack happened5) Security Automation in python - to improve workflows and provide better security by building automated checks6) Firewall and Security Products Deployment and Efficiency Reviews7) Security Training\'s for Corporate8) DevSecOps operations and implementation The above mention broader categories for my expertise areas where I have both managed people and worked on at the execution at the ground level. With expertise both professional and technically. I believe key to detail is very necessary both at times when we are working at the back-end and reporting to the client / management.

Experience

1. Senior Information Security Engineer

   Tower Research Capital

   Feb 2023 — Present · HK

   1) Working as lead for designing and implementing the organisation VAPT program including application profiling, calendar creation, test case design and reporting/governance - Web, thick client apps and networks 2) Creating log integrations for SEIM - using custom and inbuilt connectors (SEIM - Sentinel, custom - logstash) 3) Creating automations on prim / cloud to ensure better and efficient detection 4) Resolving bugs in SEIM related to log ingestion / altering, providing support to cyber defence team5) Being a part of security architect group to ensure security requirements are registered in design phase 6) Working with EDR, NDR, SEIM etc to investigate cyber security incidents7) Analysing current code base and remediating issue by suggesting/implementing any fixes/workarounds 8) Working with development / enterprise teams for any security requirements and providing solutions

Education

• Punjab Technical University

  Bachelor’s Degree, Computer Science

  2008 — 2012

Skills

• Computer Forensics
• Information Security Management
• Ceh
• Vulnerability Management
• Vulnerability Assessment
• Network Security
• Application Security
• Computer Security
• Security Audits
• Burp Suite
• Python
• Security
• Iso 27001
• Acunetix
• Information Security
• Penetration Testing