K Ramakanth

Senior Test Engineer

Nagarro Software Private Limited

HYDERABAD

02.2020 - Current

Identifying Security Vulnerabilities within running In Production Environment
Conduct Application Vulnerability Assessments and Penetration Tests for In House
Web Apps
Handled Documentation and Metrics Reporting
Schedule Pen Tests for Applications Running in Production Environment
Conduct Effective Security Testing with The Use of Automated/Semi-Automated Toolsets like Burp Suite, Metasploit Etc
Perform application scans for new Applications getting released
Perform Application Security and penetration testing's as per the PCI-DSS Guidelines
Perform Web & Mobile Application security assessment
Vulnerability assessment and support PCI-DSS compliance audits related to Section 6.6 and 11.3 application layer Penetration testing)
Penetration testing of Web applications and APIs in scope
Perform Dynamic application security testing for 100+ applications using automated tools manual techniques
Conveying technical information to senior management
Installing and working on Various Powerful Security tools
Project #3
Domain: Stater (Finance Domain)
Environment/Skills used, OWASP TOP 10 Vulnerabilities, Burp suite, Nmap, Nessus., Application Security Analysis (manual & automated) experience of web applications
Provide effort estimates for conducting security assessments
Experience in remediation review and recommendations to vulnerabilities identified during Security Assessments
Experience in preparing executive reports for every assessment
Also conduct closing meeting calls with respective clients
Experience in assisting short term client engagements for Vulnerability assessment and Penetration Testing
Check for regular security updates from standard bodies such as: Open Web Application Security Project (OWASP)
Preparing documents on Security methodologies of various app modernization projects
Knowledge Sharing, reusable assets and decks
Project #2
Domain: McKesson (Healthcare)
Environment: Burp Suite, SQL map, OWASP, HP Web Inspect
Nmap, Nessus, CSRF Tester Tool
Responsibilities:
Application Security Analysis (manual & automated) experience of web applications using HP Web Inspect and Burp Suite tools
Experience in remediation review and recommendations to vulnerabilities identified during Security Assessments
Interacting with Application development teams to guide them on the observations reported and the impact of its exploitation
Suggesting remediation recommendations for failed controls for vulnerability assessment and code reviews
Preparing executive reports for every assessment
Also conduct closing meeting calls with respective clients
Assisting short term client engagements for Vulnerability assessment and Penetration Testing
Reporting the Web Application testing vulnerabilities which are found during Manual Testing and depicting/justifying the false positive and true positive vulnerabilities in Automated App scan reports
Understanding vulnerability type by reproducing the same
Identifying the patch levels required for remediating the vulnerabilities in host level scanning
Various Log analysis depending on the need and scope
Manual report generation/submission for daily maintenance tasks.