Sourabh Jaiswal

About Sourabh Jaiswal

Work Experience- Total 10 years in Information Security (Cyber Security )4. Nike Inc.(May 2022) Tested different Web API and Application Security Assessment DAST with great focus on business logic test-cases. Hands On Experience in NPT Tools (NMAP, Wireshark, BurpSuite, Tenable Nessus, OWASP ZAP Proxy, Metasploit Framework). Good expertise on Kali Linux OS, and Parrot OS and open source penetration testing tool. Working on web application testing on the Internally and externally exposed applications. Performed external & internal network Pen-testing for client. Methodology to exploit the vulnerable network infrastructure. Performed penetration testing of Payment Gateways Security Testing. Hands on Experience SANS-25, OWASP Top 10 and Threat Modelling Framework. Performed penetration testing of Payment Gateways on Ecomm App. AWS Guard Duty, Azure Sentinel, IDS/IPS, EDR, Firewall, Proxy, and Email Security. Meredith India (April 2019 to May 2022)(Sr. Information Security Analyst-II) Experience in Vulnerability Assessment Tool (Nexpose, Qualys Guard, OpenVAS, BurpSuite) Working on web application testing on the Internally and Externally exposed applications. Performed Internal Network Penetration Testing. Vulnerability Assessment and Web Application PT for banking, online-trading and shopping, e- commerce web Apps. Involved in providing sessions on basics of security testing and guiding new, junior or team members.2 Altisource Business Solution Pvt. Ltd.(Oct 2017 – April 2019) Information Security Analyst Serving myself in Cyber Security Operation Center 3.5 Year and having a good knowledge of role and responsibly SOC engineer. Information Security Domain SIEM Technology.Hewlett Packard Enterprise (HP)(May 2015 to Sep 2017) Information Security Engineer HP Arc-Sight, Splunk, SIEM Solution HP Enterprise India. Working on Arc-Sight in 24x7 environment, offering log monitoring, server configuration, security information management, managing server domain, global threat monitoring. Working on Arc-Sight 24x7 Operation Incident Response Team for all type of security, threat alert and security breaches in environment based on event severity or priority taking a prompt action. Serving myself in Security Operation Center last 26 month and having a good knowledge of role and responsibly SOC engineer. Working on every month customer security audit for all devices (N/W devices, security), finding a non-compliance, security breaches, vulnerability (security loop hole).

Experience

1. Senior Cyber Security Engg - L2

   Nike

   May 2022 — Present · Bengaluru, IN

   Total 10 years of experience in Sr Cyber Security Engg, SR Offensive and Defensive Cyber Security, Information Security, VA/Penetration Tester, Vulnerability Assessment domains.Red Team, OWASP top 10, Burp, Purple Team, Application Security, Cloud Security, Cyber Incident Response, Threat Hunting, Digital Forensic, Malware Analysis, Cyber Threat Intelligence and IAM Security.Technical Skills:• Web Application Security Testing.• Product Security and Application Testing.• Infra and Network VA/Penetration Testing.• Internal/External Vulnerability Assessment.• SAST/DAST Application Security and Vulnerability Assessment.• Manual Source Code Review and Assessment.• Threat Modelling and Secure SDLC Review and Assessment.• Linux shell scripting and basic of python scripting• Assessed applications for issues surrounding User management, Session management, Datavalidation, including all common attacks such as SQL injection, Cross-site scripting, CSRF, PrivilegeEscalation, Parameter Manipulation, Error handling, OWASP Top 10 and SANS Top 25, PCI-DSS, ISO 27001 Audit.

Education

• GOV Boys Higher secondery School, Itarsi (Dis Narmadapuram Bhopal M.P.)

  HSS- XII, High School/Secondary Diplomas and Certificates

  2009 — 2010

• Jai Narain College of Technology BHOPAL (Aff- RGPV University)

  Bachelor of Engineering - BE , Electronics and Communication Engineering

  2010 — 2014

Skills

• Security Operations Center
• Security Information and Event Management (Siem)
• Splunk Siem Tool
• Hp Arc-Sight, Siem Tool