Senior Cyber Security Consultant
EY
مجموع سنوات الخبرة :10 years, 1 أشهر
• Heading the application security team, imparting training, and supervising cybersecurity reviews, audits, and various evaluations, including static/dynamic assessments and vulnerability management.
• Building liaison with IT and security teams in developing & maintaining IT security policy development and performing system audits to ensure compliance
• Conducting exhaustive security architecture reviews and threat modelling for diverse financial sector applications
• Performing manual & automated penetration testing, including dynamic application assessments and source code reviews.
• Auditing SDLC for applications and partnered with clients for secure SDLC process
• Efficiently utilizing tools like Terrascan and yamllint for cloud security configuration reviews.
• Conducting vulnerability scans with AppScan, Nessus, Kali Linux tools, and Rapid7, analyzing results, and coordinating with the development team for remediation.
• Formulating and introducing security best practices, disaster recovery plans, risk assessments, and security policies across numerous IT projects.
• Analyzing and assisting with risks, remediation strategies, & security engineering analysis as per manual/tool- based findings