Imran

About Imran

Application Security: Knowledgeable in addressing security issues for 10-15 applications, including performing SAST, DAST, and manual penetration testing. Experience in removing false positives, analyzing static and dynamic scan reports from tools like Fortify and Web- Inspect. Manual penetration testing using Burp Suite and OWASP ZAP for identifying SQL injections, XSS, CSRF etc. Generated comprehensive reports for scan results, performed suppression, and implemented necessary fixes. Conducted server penetration testing using tools like Metasploit, generating reports and implementing suppressions. Conducted manual penetration testing for web and mobile applications, identifying vulnerabilities on Android and iOS platforms. Validating Data and analysis with the external audit and validating the manual testing reports on quarterly basis with external audit for application related security. Communicating with the concerned team for better explanations of security issues. Conducting Security Audit to minimize IT security Risk. Preparing reports, reviewing supported documentation, analyzing bugs in code and mitigate run time damage in Production. Tracking all the deployments and follow up for compliance and GRC related factors Security Tools: Familiar with security tools such as Fortify, ZAP, Burp Suite, and Perspicacity Tool for vulnerability assessment and management. OWASP Principles: Understanding of OWASP principles, vulnerability management, and incident response procedures. Deployment Automation: Proficient in Jenkins for streamlining deployment processes and ensuring efficient multiple deployments. Maintenance Optimization: Experienced in working with Prime and Jile to effectively manage working hours and efforts for maintenance tasks. Programming Languages: Knowledge of Python and Java for handling and developing application code. Database Management: Proficient in SQL database management and ETL table handling. Job Scheduling: Experienced in Control-M for scheduling and managing jobs efficiently.Container security: Understanding of container security, image vulnerabilities and repository vulnerabilities Threat Modelling: identifying potential security threats and vulnerabilities in a system or applicationVulnerability management: Exchange knowledge on vulnerability scanning, prioritization, and remediation strategies by using mythologies like STRIDE, PASTA.

Experience

1. Sec Engineer

   Tata Consultancy Services

   Jan 2022 — Present · Hyderabad, IN

Education

• Vignan Degree College, Guntur

  Master of Computer Applications - MCA, Computer Science

  2018 — 2020

• Vignan Degree College, Guntur

  Bachelor of Science - BS, Computer Science

• Sri Chaitanya College of Education

  Intermediate, Maths physics chemistry