Srijana M

Penetration Tester @TD

Boston, MA, US

At TD Bank, I lead offensive security initiatives as part of the Red Team, simulating advanced adversary tactics to test detection and strengthen enterprise defenses. My role spans full-scope penetration testing across networks, APIs, applications, and wireless systems to uncover exploitable vulnerabilities, while also leading APT-style red team engagements using techniques such as DLL injection, process hollowing, and lateral movement to identify SIEM/EDR blind spots. I perform in-depth cloud security audits across AWS, Azure, and GCP, ensuring compliance with PCI-DSS, SOX, and FISMA by identifying IAM misconfigurations and security gaps. In addition, I execute wireless security assessments and rogue AP simulations to test endpoint resilience, embed SAST/DAST tools like SonarQube and OWASP ZAP into CI/CD pipelines to proactively reduce vulnerabilities, and deliver comprehensive reports with CVSS scoring for executives and technical teams. Partnering closely with Blue Teams and engineering groups, I help enhance detection, strengthen incident response, and improve overall enterprise resilience against evolving threats.

University of Massachusetts Dartmouth

Master's degree