Sundarigari Manoj

About Sundarigari Manoj

13+ years of experience on Security Testing of Web, Network and Mobile.Web application Security Testing and Security Architecture - SAST and DASTApplication Threat Modeling using STRIDE/DREAD/CVSS/Attack TreeEnterprise Network Security- Internal and External IP ScanningEnd point security and managementMobile security (iOS/Android), Engineering Design Reviews, Security Architect. Security Management - Secure Policies, Standards and Procedures with proper change management, Incident management and Risk Management process.Compliance - ISO-27001, GDPR, PCIDSS, HIPPA, OWASP Top 10, SANS Top 25Tools:Web Vulnerability Scanners (DAST): IBM App scan Standard, HP Web Inspect, Acunetix, Nessus, Burpsuite, ZAPNetwork Vulnerability Scanners (DAST): Qualys, Nessus Static Code Scanners: IBM App scan Source, Veracode, Coverity, Fortify, Black Duck, SnykEnd Point Security and Management: Mcafee Virus Scan Enterprise, IPS, IDS, DLP, Browser Protection, SIEM, Cloud ePO, Mcafee Agent, SIEMPenetration Testing: Metasploit, nmap, Wireshark, Hydra, netcat, Burpsuite Proxy, Kali Linuxexperience in Software Automation, Performance Testing, Build deployments, Test Setup, DevOps, Virtualization.Tools: Automation: Selenium Webdriver (C#/ Java), SQL 2008/2012, SOAP UI, Postman, WCF Test Services, MS Test, TestNG, Maven, Log4j and ApachePOI. CD/CI Pipelines.Performance: New Relic, Xperf, Perfmon, SQL profiler, VSTS WebTests

Experience

1. Senior Security Engineer

   Microsoft

   Apr 2024 — Present · IN

   I drive proactive security measures by simulating real-world attacks to identify and mitigate potential threats. My role blends strategic planning, hands-on execution, and close collaboration with security teams to ensure our defenses are robust and adaptive.Key Responsibilities:Experience on Security Testing of Web, Network and Mobile.Web application Security Testing and Security Architecture - SAST and DASTApplication Threat Modeling using STRIDE/DREAD/CVSS/Attack TreeEnterprise Network Security- Internal and External IP ScanningEnd point security and managementMobile securitySecurity Management - Secure Policies, Standards and Procedures with proper change management, Incident management and Risk Management process.Compliance - ISO-27001, GDPR, PCIDSS, HIPPA, OWASP Top 10, SANS Top 25Tools:Web Vulnerability Scanners (DAST): IBM App scan Standard, HP Web Inspect, Acunetix, Nessus, Burpsuite, ZAPNetwork Vulnerability Scanners (DAST): Akamai WAF, Qualys, Nessus, TruffleHog. Paloalto, load balance, Arista SwitchesStatic Code Scanners: Fortify, IBM App scan Source, Veracode, Coverity, Black Duck Hub.End Point Security and Management: Mcafee Virus Scan Enterprise, IPS, IDS, DLP, Browser Protection, SIEM, Cloud ePO, Mcafee Agent, SIEMPenetration Testing: Metasploit, nmap, Wireshark, Hydra, netcat, Burpsuite Proxy, Kali Linuxexperience in Software Automation, Performance Testing, Build deployments, Test Setup, DevOps, Virtualization.API Security, Cloud Security: CI/CD pipelines using Jenkins and Artificial intelligence (AI) Scans, LLM (prompt injections).

Education

• Jawaharlal Nehru Technological University Kakinada (JNTUK)

  Master of Technology - MTech, Cybersecurity

• Visvesvaraya Technological University

  Bachelor of Engineering (B.E.), Electronics and Communications Engineering

  2013