Varun B

About Varun B

As a Cybersecurity Engineer with over 6 years of experience, I have developed a deep passion for securing digital landscapes and driving risk management strategies. Throughout my career, I’ve honed my expertise in Penetration Testing, Vulnerability Assessment, and Security Risk Management, providing actionable insights and solutions to organizations in various industries.I have a strong background in identifying and mitigating security vulnerabilities, particularly in web and mobile applications, using tools like Burp Suite, OWASP ZAP, Kali Linux, and Acunetix. I’ve successfully conducted thorough security assessments, uncovering critical risks and collaborating with development teams to remediate vulnerabilities. Whether it’s implementing Static and Dynamic Application Security Testing (SAST/DAST) or conducting manual penetration tests, my goal is always to ensure that applications and systems are secure from emerging threats.I’m experienced in leveraging security frameworks such as NIST, PCI-DSS, and HIPAA to guide my work and ensure compliance with industry standards. As part of my approach, I emphasize the importance of Secure SDLC practices and the continuous integration of security throughout the software development lifecycle.One of my proudest achievements was leading vulnerability management efforts at both Scotiabank and Costco, where I identified and remediated high-impact vulnerabilities that significantly reduced security risks. I also developed and implemented formal security programs that improved the overall security posture of the organizations I’ve worked with.Looking ahead, I’m excited to continue advancing in the cybersecurity field, specifically in application security and risk management. I aim to keep driving innovation, working with cross-functional teams, and staying ahead of evolving cyber threats. I\'m always eager to explore new technologies, improve security frameworks, and contribute to initiatives that help organizations become more secure and resilient in an increasingly digital world.If you\'re looking for a cybersecurity professional with hands-on experience, a deep understanding of risk management, and a passion for securing applications, I’d love to connect!

Experience

1. Cyber Security Engineer

   Scotiabank

   Sep 2023 — Present · NY, US

   As a Cyber Security Engineer at Scotiabank, I play a critical role in safeguarding the bank’s applications and infrastructure from potential cyber threats. My focus is on conducting comprehensive security assessments, leveraging both automated and manual penetration testing methodologies to uncover vulnerabilities and mitigate risks. Key responsibilities and achievements include:Scope Definition & Attack Modeling: Collaborated with cross-functional teams to define the scope of security assessments, identifying potential attack vectors and creating attack models to simulate real-world threats.Automated Testing & SAST Implementation: Led the integration of Static Application Security Testing (SAST) tools such as Invicti and WebInspect into the development process, increasing the efficiency of vulnerability detection and reducing manual effort by 30%.Manual Penetration Testing: Conducted in-depth manual penetration testing to identify vulnerabilities that automated tools might miss, resulting in the remediation of high-priority vulnerabilities.Reporting & Documentation: Authored detailed security reports that outlined identified vulnerabilities, reproduction steps, and actionable remediation strategies. These reports were used as a reference to track progress and ensure continuous improvement.Cross-Team Collaboration: Worked closely with application developers and deployment teams, ensuring security best practices were integrated throughout the SDLC and supporting secure deployment processes.