Piyush Jadhav
Cyber Security Professional
Pune,MH
Summary
I am a fervent professional dedicated to providing data-driven solutions and actionable insights for complex challenges. My expertise lies in utilizing advanced vulnerability assessment and penetration testing techniques to enhance organizational objectives. With a keen interest in the realms of Penetration Testing and Security Auditing, I am proficient in Ethical Hacking, Web Application Penetration Testing, Android Penetration Testing, and both Thick and Thin Client Testing. My skill set extends to mastering Linux environments and conducting thorough Wi-Fi Penetration Testing, ensuring comprehensive security evaluations across various platforms.
Overview
6
6
years of professional experience
7
7
Certifications
3
3
Languages
Work History
Senior Security Testing Engineer
EPAM Systems.
Pune, Maharashtra
10.2024 - Current
- Conducted comprehensive Vulnerability Assessments (VA) to identify and mitigate critical security risks across systems and networks.
- Delivered professional training sessions to internal teams, enhancing organizational cybersecurity awareness and competency.
- Performed performance evaluations of cybersecurity tools, ensuring their efficiency and alignment with business needs.
- Collaborated with cross-functional teams to implement robust security controls, maintaining compliance with industry standards and best practices.
- Ensured the confidentiality, integrity, and availability of sensitive data by adhering to strict security protocols and frameworks.
Senior Domain Manager (Cyber Security)
Bajaj Finance Ltd
11.2022 - Current
- Expert in conducting vulnerability assessments and penetration testing for Web, API, and mobile applications
(Android/iOS), coupled with effective mitigation strategies. - Proficient in identifying critical security flaws such as Privilege Escalation, Authentication Bypasses, XSS, IDOR, L/RFI,
and RCE across Web and thick client applications. killed in security testing and attack surface mapping for comprehensive web and mobile ecosystem protection. - Active participant in Red Teaming Assessments & Network Pentests, delivering actionable cybersecurity
recommendations to management. - An innovator in security assessment enhancement through the creation of proprietary strategies and methodologies. Knowledgeable in aligning security practices with business requirements and application architecture. Experienced in securing Payment technologies and architecture, including conducting rigorous security testing.
• Accomplished in producing detailed security documentation and comprehensive security assessment reports. Compliance and DevOps: Awareness of Azure's compliance and governance tools (Policy, Blueprints) and DevOps integration (Azure DevOps services) supports a holistic approach to security testing, encompassing policy adherence and CI/CD pipeline vulnerabilities.
Senior Executive Consultant
Deloitte Touche Tohmatsu India LLP
12.2020 - 11.2022
- Spearheaded cybersecurity initiatives at Deloitte India, mastering a suite of security protocols, including AppSec, API testing, compliance audits, digital forensic readiness, and firewall configuration analyses. Excelled in Vulnerability Assessment & Penetration Testing (VAPT), elevating organizational defenses against cyber threats.
- Conducted rigorous application security evaluations for a diverse client base in the financial and non-financial sectors. Expertly identified and mitigated a broad spectrum of security vulnerabilities, delivering tailored remediation strategies.
- Led exhaustive vulnerability assessments, leveraging both manual and automated tools to fortify network and data integrity. Performed network, asset, web, data, and application security evaluations, utilizing advanced tools for both manual and automated assessments.
- Collaborated with project teams and stakeholders to remediate identified security vulnerabilities within targeted turnaround times. Identified system vulnerabilities and weaknesses, reporting findings with actionable remediation and risk mitigation recommendations.
- Cultivated advanced cyber security and digital forensics skills, ensuring robust protection of digital assets. Conducted comprehensive vulnerability assessments and exploits on financial and non-financial applications, both internally and externally.
Information Risk Management Associate
Hacktify Cyber Security
12.2019 - 10.2020
- Proficient in Cybersecurity principles, specializing in Vulnerability Assessment and Penetration Testing (VA/PT).
- Skilled in Bug Bounty strategies, leveraging automation tools such as Sniper, 3klCon Project, and OSINT Framework.
- Expertise in utilizing Shodan, Censys, Nmap, Aquatone, and Recon-ng for in-depth security reconnaissance.
- Experienced in employing Kali Linux tools for both offensive and defensive cybersecurity operations.
- Former Cyber Security Consultant at Hacktify Cyber Security, adept at tackling real-world security challenges.
Associate Consultant
Technitics Consulting Pvt Ltd
11.2018 - 11.2019
- Spearheaded comprehensive research on emerging trends to bolster expertise in Cyber Security and Vulnerability Assessment/Penetration Testing (VA/PT).
- Acquired hands-on proficiency in Cyber Kill Chain methodology and Kali Linux toolsets, enhancing practical knowledge.
- Cultivated a keen interest in Cyber Forensics with a specialization in web and network penetration testing.
- Engaged in immersive hands-on training to refine competencies in advanced cyber security and defensive tactics.
Education
Bachelor of Engineering - Computer Science and Engineering
S B Jain Institute Of Technology Management & Research
Nagpur, MaharashtraSkills
Web Application Penetration testing
Mobile Application Security–Android
Mobile Application Security-IOS
Thick Client Application Assessment
API Security Testing
Network Security Assessment
Wireless Penetration Testing
Configuration Audit
Azure Cloud Computing
Red Teaming Operations
Active Directory Exploitation
Source Code Review using tools like Fortify Audit Workbench and Checkmarks
BurpSuite
Nessus
Nmap
Fortify WebInspect
OWASP ZAP
Websites
Certification
Certified Red Team Professional (CRTP), 96519156
Accomplishments
- Deloitte Touche Tohmatsu India LLP - Live the Dot - Recognize and Reward consistent performance/outstanding contribution of an individual from Deloitte.
- Bajaj FinServ Ltd - Got Recognition from other team leaders for faster completion of work. Ahead of time.
Timeline
Senior Security Testing Engineer
EPAM Systems.
10.2024 - Current
Senior Domain Manager (Cyber Security)
Bajaj Finance Ltd
11.2022 - Current
Senior Executive Consultant
Deloitte Touche Tohmatsu India LLP
12.2020 - 11.2022
Information Risk Management Associate
Hacktify Cyber Security
12.2019 - 10.2020
Associate Consultant
Technitics Consulting Pvt Ltd
11.2018 - 11.2019
Bachelor of Engineering - Computer Science and Engineering
S B Jain Institute Of Technology Management & Research