Oversee end-to-end security operations including DLP implementation, policy development, and security testing frameworks. Conduct comprehensive penetration testing (SAST/DAST) across web/mobile applications, identifying critical vulnerabilities and driving remediation.

Serve as Security Awareness Manager, developing security awareness programs and reporting directly to executive leadership. Align security initiatives with business objectives through cross-functional collaboration, establishing robust security frameworks for organizational growth.

Led internal penetration testing initiatives and third-party risk management programs, conducting vendor security assessments and VAPT activities. Facilitated client security collaborations to resolve critical issues while ensuring regulatory compliance specifically for PCI-DSS.

Integrated security best practices across business operations through architecture reviews and CI/CD pipeline enhancements, reducing security incidents by 50% through improved authentication mechanisms.

Directed enterprise security assessments, managing teams to deliver comprehensive penetration testing and PCI DSS compliance audits. Developed standardized testing methodologies that improved assessment efficiency by 30%.

Presented security findings to C-level executives while mentoring junior team members in advanced vulnerability identification techniques.

Performed vulnerability assessments and penetration testing for web/mobile applications following OWASP methodologies. Specialized in PCI DSS compliance assessments and source code reviews.

Developed comprehensive reports outlining security findings and remediation strategies. Conducted security training sessions for development teams and junior security consultants.

Conducted security assessments of web/mobile applications and APIs for clients across banking and financial sectors. Performed vulnerability scanning and manual penetration testing.

Assisted in developing client relationships by providing excellent customer service and technical expertise. Demonstrated live attack sessions including Log4Shell vulnerability for ISACA Silicon Valley Chapter.

Identified and responsibly disclosed vulnerabilities in various platforms through bug bounty programs including HackerOne. Contributed to securing web/mobile applications by discovering and reporting security issues.

Received acknowledgments from multiple organizations including Fitbit and AlienVault Security for vulnerability discoveries and security improvements. Developed expertise in identifying zero-day threats and complex security flaws.

Advanced certification covering Android security architecture, vulnerability assessment, and penetration testing techniques for mobile applications.

Specialized training in iOS platform security, jailbreak detection bypass techniques, and secure coding practices for Apple ecosystems.

Hands-on certification in embedded device security and IoT vulnerability assessment methodologies.

Diploma Certification in Capture the Flag competition, demonstrating practical security skills in competitive environment.

Cisco Networking Academy certification covering core security principles, network defense, and vulnerability management.