Rooshan Naeem

 Working with the development team to do secure code reviews,
secure CI/CD pipelines (SAST, DAST, SCA, etc)
 Building a secure infrastructure, run penetration testing and security scanning
 Understand the AWS security landscape & deploy controls to prevent, detect and
respond to those security threats.
 SOC2 Audits
 Quarterly Manual Pen-testing activities
 Security Operations for Endpoint security

 Senior Security Engineer in a fast paced Software Industry.
 Working on different clients projects to ensure the quality and
secure code delivery of the projects.
 Developing the framework and mindset to integrate security best practices throughout
the software development life cycle making it S-SDLC.
 Making Secuirty ‘Shift Left’ in DevOps to guarantee Application Security at the earliest
stage of development life cycle.
 Working on implementation of DevSecOps to evolve current DevOps life cycle.
 Integrating SCA, SAST, DAST and PT tools in CI/CD.
 Making Cloud infrastructure secure by applying relevant security best practices
 Infrastructure security and scanning
 AWS, Docker, Kubernetes, Jenkins, Terraform and Ansible.
 OWASP Top 10, API Top 10, PCI DSS, SSAE, CEH, Cloud Security, K8s Security and
Container Security

Application Security Engineer in a Payment Industry.
 Working on different industry leading tools to ensure the security of
Web, Mobile and Back end Applications.
In depth knowledge of Information Security standards (ISO 27001, GDPR, NIST, PCI DSS)
and market leading tools.
 Logs analysis and scanning
 Vulnerability Assesment and Penetration Testing (VAPT)
 Active part in PCI DSS Pen testing activity
 Infrastructure security and scanning
 Worked on different projects to make sure the secure development of Applications and
secure configuration for Servers
 Trust wave App Scanner, Burp Suite, JMeter, Infrastructure(SSL, Server Level checks)
Scan and Proxy tools
 OWASP Top 10, API Top 10, PCI DSS, SSAE, CEH.

Trainee at SAP under Young’s Professional Program.
 Gained extensive training on core Logistics/ SCM modules -
Material Management
/Sourcing and Procurement
 In depth knowledge of SAP implementation methodologies - SAP Activate
 Communication/Presentation Skills Training
 Design Thinking