Shubham Borhade

About Shubham Borhade

Application Security professional with hands-on experience in securing complex…

Experience

1. Application Security Analyst

   Paycom

   Jan 2024 — Present · Grapevine, TX, US

   As an Application Security Analyst, my responsibilities encompass the following:• Conducting penetration testing on Paycom\'s web application to find vulnerabilities, adhering to OWASP Top 10 protocols and testing guidelines. Employing tools such as Burp Suite, OWASP Zap, and others to facilitate this process. Additionally, documenting findings, detailing the methodology used for discovery, and offering remediation recommendations to the software development team.• Collaborating with developers and the quality assurance team to address vulnerabilities and improve user experience for clients. Reviewing code written by developers prior to deployment in testing or production environments.• Monitoring and analyzing external attacks logged in the web application firewall to ascertain their success or failure. Utilizing Splunk and Burpsuite for the same.• Conducting training/shadowing sessions for new teammates. Demonstrating pentest methodologies, processes, and covering OWASP top 10 topics.• Developing tools that scans the codebase to identify SQL query structures and parameterization, routes of modules, and to identify outdate code/libraries/components. Tools that would enhance the automation process and decrease manual efforts.