Vishnu Raveendran

Conduct comprehensive VAPT across Web, API, and Mobile applications, identifying and mitigating critical vulnerabilities to enhance
product security posture.
Perform security assessments on containerized environments (Docker and Kubernetes), ensuring adherence to industry security
standards and best practices.
Collaborate with development teams to promote secure coding practices and integrate automated security tools into CI/CD product
development pipelines.
Assess moderate-to-severe security vulnerabilities, perform Root Cause Analysis (RCA), and deliver actionable remediation strategies to
engineering teams.

Executed deep-dive ethical hacking and penetration testing across Web applications and Mobile (Android/iOS) platforms, mapping
vulnerabilities to OWASP standards.
Implemented continuous improvement activities by identifying vulnerabilities and deploying security measures to ensure robust
protection against potential breaches.
Conducted comprehensive security assessments on web services and mobile APIs to identify business logic flaws, insecure data storage,
and authentication bypasses.
Advised clients on secure coding practices and application hardening techniques, implementing continuous improvement activities.

Provided technical and operational support for secure digital banking transactions, including fund transfers and account updates.
Utilized CrowdStrike and Forcepoint to maintain endpoint security and enforce data loss prevention policies across enterprise systems.
Managed security alerts by handling and resolving tickets generated by CrowdStrike and Forcepoint to enforce endpoint protection and DLP
policies.
Supported enterprise incident management by identifying, logging, and escalating potential security anomalies within secure transaction
environments.

Handled incoming communications to provide first-level technical support, directly assisting employees with secure system access,
connectivity troubleshooting, and VPN configuration.
Managed and triaged operational and security incident tickets, including responding to initial endpoint alerts generated by CrowdStrike
and Forcepoint.
Contributed to organizational security practices by ensuring proper Identity and Access Management (IAM) protocols were followed
during employee onboarding and troubleshooting.