Summary
Overview
Work History
Education
Skills
Certification
Timeline
Generic

Raghavendra Vasista

Bangalore

Summary

Security Engineer with 2+ years of experience in various domains such as

• Web Application and API security testing, Vulnerability Assessment, penetration testing

• Mobile Application security testing, Vulnerability Assessment, penetration testing

• Currently working as Senior Consultant - Technical Services at CYRAAC Services Private Limited, Bangalore.

• Background/understanding of software development lifecycle

• Excellent communication skills with proven abilities in resolving complex networking, hardware & software related issues

• Managed a plethora of clientele, performing security testing and also guiding the developers on remediation of the vulnerabilities identified

• Managed the cycle of project continuity, reviewed the technical work of team, and ensured the quality of service deliverable.

• Skilled in Customer relation, business requirement gathering and Threat modeling. Organize meetings and reviews

Overview

2
2
years of professional experience
1
1
Certification

Work History

Penetration Tester - Senior Consultant

CyRAACS
02.2022 - Current
  • Performed penetration testing on various Web Applications, Mobile Applications, APIs and Thick Client Applications.
  • Reviewed policies and act like a Subject Matter Expert on best practices.
  • Performed dynamic and static analysis of web applications and mobile applications using various tools like Burp Suite, MobSF, OWASP-ZAP. Analyze systems for potential vulnerabilities that may result from improper system configuration, hardware or software flaws, or operational
  • Experienced in conducting penetration testing on critical banking and financial applications and phishing and DoS/DDoS attacks
  • Reviewed security documentation and make recommendation. Assisted in conference call meeting with Developer to mitigate vulnerability findings
  • Port scan servers using NMAP and close all unnecessary ports to reduce the attack surface
  • Performed live packet data capture with Wireshark to examine security flaws. Used LDAP injections techniques of exploiting Web applications that use client supplied data
  • Experienced in Vulnerability Management Programs driving the program from testing, reporting, remediation, validation through compliance.
  • Ran vulnerability and compliance scanning on test machines and reviewed security standard and Minimum Security Baseline for the client. Assisted on Monthly conference call to discuss implementation and upgrade of critical infrastructure

Education

Bachelor's of Engineering - Computer Science

JSS Academy of Technical Education, Bangalore
Bangalore, India
09.2022

Skills

  • Kali Linux
  • Web Application Penetration Testing
  • Android and iOS Application Penetration Testing
  • Network vulnerability scan and penetration testing
  • Familiar with password hash cracking MD5, SHA1, SHA2, etc and encryption cracking
  • Familiar with social engineering attacks
  • Real-time traffic analysis, network IDS and packet dissection using WireShark
  • Experience with tools: Aircrack-ng, Hydra, Burpsuite, Metasploit, OWASP-ZAP Nmap, Wireshark, Sqlmap, John-Ripper, Nesuss, Gophish
  • Knowledge of Heartbleed, ShellShock and POODLE
  • Crisis Management Specialist
  • Knowledge of operating systems, application software and cyber security tools Remote access support

Certification

CCA Certified Java Programmer

Android Developer Certification - Udemy

Certified Ethical Hacker (CEH) - EC Council

Timeline

Penetration Tester - Senior Consultant

CyRAACS
02.2022 - Current

Bachelor's of Engineering - Computer Science

JSS Academy of Technical Education, Bangalore
Raghavendra Vasista