Tushar Routray

About Tushar Routray

Learn. Break. Share.Always keen to learn new technology, stack, codebase, attack paths, risks, vulnerability, etc, and use it in my day-to-day work to efficiently complete assessments with the highest quality. Found interesting business logic abuses and corner case command injections to secure client applications. Believe in \"sharing is caring\" and spend a significant amount of time sharing whatever I learned in security meetups.Capabilities:• AWS Security is a critical aspect of modern cloud environments, and I possess a strong understanding of AWS services and best practices. I specialize in assessing the security of AWS deployments, including identity and access management, network configuration, data encryption, and more. By conducting comprehensive audits and implementing relevant security controls, I help organizations secure their AWS infrastructure effectively.• I specialize in Mobile Penetration Testing, ensuring the security of mobile applications and devices. Through in-depth assessments of mobile applications on various platforms, including iOS and Android, I identify security flaws such as insecure data storage, insufficient encryption, weak authentication mechanisms, and more. I assess overall device security by analyzing device configurations and settings to prevent unauthorized access or data breaches.• Performed Red teaming through various techniques, including social engineering and penetration testing, the red team attempts to gain unauthorized access, extract sensitive information, and evaluate the effectiveness of security controls. The findings are documented in a detailed report, helping organizations identify weaknesses, improve incident response, and enhance security resilience.[+] Topics presented* Integer Injection, Null Bangalore, Null Bhubaneswar * Azure, AWS Security[+] Security ProcessCloud Security, Thick Client Assessment, Threat Modeling, Penetration Testing, Privacy Advocate, Security Architecture Design, Bug Bounty, DevSecOps[+] Security Tools Experiencenmap, Metasploit, BurpSuite, AppScan, Nessus etc[+] Security DomainsWeb Application VA/PT, Mobile Application VA/PT, Internal/External Network/Infrastructure VA/PT, Azure and AWS VA/PT, Cloud Security, Cloud Configuration and Audit[+]Security FrameworksOWASP, WASC, CWE, ASVS etc[+] Type of ApplicationBanking, E-commerce, Hospitality, Retailing, Telecom Security, Healthcare, Digital Event platform[+] Publicationshttps://medium.com/@tusharroutray

Experience

1. Associate Consultant

   Tata Consultancy Services

   Oct 2023 — Present

Education

• The techno school

  B.tech, Infomation Technology

  2007 — 2011

• GM Junior College

  Inter., Science

  2004 — 2006

• Budharaja High School

  H.S.C

  2003 — 2004