Sumit B

Experience

1. Senior Security Engineer

   NMC Healthcare

   Nov 2024 — Present

   Developed security policies and standards and made sure the business applications are in compliance with the standards.•Conducted application penetration testing of 80+ business applications.•Performing risk assessments throughout cloud DevSecOps / CICD pipelines including automated & manual source code reviews and OWASP manual penetration testing of mobile & web applications on AWS/Azure.•Led customer engagements in deploying and configuring Illumio for micro-segmentation, ensuring effective segmentation strategies and minimizing infrastructure risk.•Conducted Vulnerability Assessment (DAST and SAST) of Web and Mobile (iOS and Android Applications, including third party applications. The tools IBM AppScan, ZAProxy, BurpSuite Pro have been utilized for scanning the applications.•Developed custom ServiceNow applications to streamline IT service processes, resulting in a 25% reduction in ticket resolution time.•Penetration testing web applications, web services and mobile applications.•Performing Dynamic Application Security Testing (DAST) & Static Application Security Testing (SAST) as well as penetration testing (hybrid, automated and manual penetration testing).•Conduct penetration tests of enterprise information security systems, cloud platform infrastructure, and high risk applications.•Worked with cloud platforms such as Azure, AWS, and GCP, integrating Illumio and other security tools to strengthen security in cloud-based environments.•and monitor for security anomalies of host, container, and serverless functions.•Hands on experience with the Deployment of Imperva Web Application Firewall (WAF) installing, configuring including the administration of SecureShpere portal.•Worked closely with stakeholders to define and implement micro-segmentation strategies, aligned with current security standards.•Integrated ServiceNow with external systems, facilitating seamless data exchange and improving data accuracy.

Education

• Rutgers University

  Bachelor's degree, Information Technology