Swapnil Patil

About Swapnil Patil

With 13 years of professional IT experience, I have held my skills in DevSecOps, AppSec, Cloud Security, Software development and automation.I have spent over a year as an Automotive Cybersecurity Architect for Magna SDV and 7 years as a DevSecOps cloud native application security architect. I have expertise in vulnerability management, CIS, information & application security, and have demonstrated knowledge of OWASP top 10. I have hands-on experience with scanning tools for SAST, DAST, SCA, IAST and Container Security.I have diverse experience in vulnerability management and fixing. I have proven proficiency in providing application security to applications hosted on GCP, Azure, AWS Cloud, and have excellent experience in version control software like GIT, Bit Bucket. I have experience in various security tools integration like Veracode, WhiteSource (mend), Snyk, Checkmarks & Opensource tools in azure pipelines. Having a good understanding of Generative AI. I am a certified Azure, GCP and AWS cloud.

Experience

1. Devsecops & Cloud Cyberecurity Architect

   Wipro

   Feb 2022 — Present · Pune, IN

   DevSecOps Architect * Security Integration Specialist: Proven expertise in integrating security tools (Veracode, Whitesource) into Azure DevOps CI/CD pipelines to ensure the security compliance of GCP and Azure-hosted applications.* Automation Engineer: Proficient in scripting languages (Shell, Python, PowerShell, JavaScript) to automate security testing, vulnerability scanning, and compliance checks.* Agile Practitioner: Experienced in Agile development methodologies, particularly Azure DevOps, to deliver secure and efficient solutions.* Subject Matter Expert: Recognized as a trusted advisor in security best practices, threat modeling, and risk assessment.* Continuous Learner: Committed to staying updated with emerging technologies and implementing innovative solutions to address client needs.Key Security Focus Areas:* Static and Dynamic Application Security Testing (SAST, DAST): Leveraging Veracode and Whitesource to identify and mitigate vulnerabilities in code and running applications.* Authorization and Authentication Testing: Automating tests to ensure secure access controls and identity verification.* Open Source and Third-Party Vulnerability Scanning: Identifying and addressing security risks associated with external components.* REST API Testing: Validating API security, including authentication, authorization, and data protection.* Security Operations Center (SOC) Monitoring: Implementing continuous monitoring and incident response procedures.* SSL/TLS Certificate Compliance: Ensuring secure communication channels and certificate validity.* Secret Management: Implementing secure practices for storing and managing sensitive information.* Docker Container Security Scanning: Identifying and addressing vulnerabilities in container images.Professional Engagement:* Actively participate in daily stand-up meetings with clients and team members to align on requirements, track progress, and address challenges.

Education

• Devi Ahilya Vishwavidyalaya (DAVV), Indore

  Bachelor's degree, Computer Programming, Specific Applications

• Rastriya Vidyalaya Junior College, Chalisgoan

  HSC, Computer Science

• J R City High School, Dhule

  SSC, Mathematics and Computer Science

  1999 — 2003

• Kavayitri Bahinabai Chaudhari North Maharashtra University (KBCNMU), Jalgaon

  Master's degree in MCA, MCA

  2009 — 2012

Skills

• Codeigniter
• Sql
• Ajax
• Xml
• Zend Framework
• C#
• Web Development
• Web Services
• Javascript
• Php
• Html
• Jquery
• Cakephp
• Mysql
• C