Shubham Mane

About Shubham Mane

Cybersecurity Specialist | AppSec | Risk & Threat Analyst | SOC | Red & Blue Team Hybrid With over 8 years of cybersecurity experience, I bring a unique hybrid background spanning manual penetration testing, application security, secure code review, risk analysis, SOC operations, and incident response. My career has evolved from offensive red team engagements to proactive threat detection, making me well-rounded in both attack simulation and defense hardening. Application Security & Penetration Testing • Performed end-to-end manual testing for enterprise web apps, APIs, and mobile platforms using Burp Suite, OWASP ZAP, and Kali Linux • Led secure code reviews (Java/.NET) to detect logic flaws, injections, and insecure patterns • Integrated SAST/DAST tools (Checkmarx, Veracode, AppScan) into CI/CD pipelines SOC, Threat Hunting & Incident Response • Worked as a SOC Analyst & Incident Responder, using Splunk, CrowdStrike, and Proofpoint to investigate alerts and contain threats • Conducted threat hunting based on MITRE ATT & CK, IOC analysis, and network anomalies • Investigated phishing, endpoint compromise, and email threats across enterprise environments Risk Management & Compliance • Performed security risk assessments and supported GRC efforts aligned with HIPAA, NIST, and HITRUST • Maintained risk registers, documented findings, and supported internal audits and compliance checks • Mapped vulnerabilities to OWASP Top 10, CVEs, CVSS, and prioritized remediation strategies Tools & Technologies Burp Suite | OWASP ZAP | Splunk | CrowdStrike | Proofpoint | Veracode | Checkmarx | AppScan | Nessus | Kali Linux | Wireshark | Python | Java |.NET Certifications CEH, CompTIA Security+, AWS Certified Solutions Architect – Associate Open to roles in Application Security, Threat & Risk Analysis, SOC/Incident Response, or Hybrid Red/Blue Team roles across the U.S.(C2C/W2). Let’s connect and secure the future — one layer at a time.

Experience

1. Information Security & Risk Analyst

   Wipro

   Jul 2023 — Present · Chicago, IL, US

   In this hybrid role, I worked at the intersection of threat detection, incident response, and risk management to protect enterprise systems, ensure compliance, and reduce overall security exposure. My responsibilities combined hands-on incident investigation with strategic risk analysis and threat intelligence, including: • Monitored security events using SIEM (Splunk) to detect threats, investigate anomalies, and escalate critical incidents. • Performed in-depth threat analysis across endpoints, networks, and email vectors using tools like CrowdStrike and Proofpoint. • Led incident response activities, including triage, root cause analysis, containment, and post-incident review. • Conducted risk assessments for internal systems and third-party vendors to identify vulnerabilities and non-compliance with HIPAA, HITRUST, and NIST standards. • Worked closely with SOC teams to improve detection logic, reduce false positives, and streamline response workflows. • Maintained and updated the enterprise risk register, tracking remediation plans and preparing reports for audits and leadership. • Developed and enforced security policies, standards, and playbooks to align with evolving threat landscapes. • Supported governance, risk, and compliance (GRC) functions by assisting in internal audits, risk reviews, and data protection efforts.

Education

• DePaul University

  Master's degree

  2021 — 2023

• Dr. D.Y. Patil Pratishthan's Padmashree Dr. D.Y.Patil Institute Of Engineering and Technology

  Bachelor's degree