Information Security
Riddhi Shree
Freelancer
Ranchi
Summary
Experienced in performing web, mobile and network security assessments. Comfortable creating automation scenarios using Robot Framework. Good understanding of Docker, docker compose, Jenkins, GitHub, GitLab, Kubernetes, AWS. Passionate about learning software technologies.
I have given technical talks at various security conferences including Nullcon, c0c0n, BSides, Hack-In-The-Box, TexasCyber, Wicked6, etc. Have also given technical trainings and workshops on Web and Mobile application security at various security conferences.
Being an integral part of Winja community (present) and null community (in past), I have organized various community events including several onsite and online Capture-the Flag competitions.
Enthusiastic learner, eager to contribute to team success through hard work, attention to detail and excellent organizational skills. Motivated to learn, grow and excel in Information Security industry.
Overview
15
15
years of professional experience
6
6
years of post-secondary education
2
2
Certificates
Work History
Freelancer
Freelance
Ranchi
01.2021 - Current
- I give secure coding trainings at Scademy
- I give talks and trainings around web security at security conferences
Security Analyst Consultant
Arogya.ai
Jakarta
04.2021 - 05.2022
- Performed Web application security testing
- Performed test automation using Robot Framework
- Managed AWS infrastructure
- Learned Kubernetes, Airflow and Pandas
Security Analyst
Appsecco
Bangalore
04.2018 - 09.2020
- Performed Web Application Security Testing
- Performed Mobile Application Security Testing
- Performed Network Vulnerability Assessments
- Developed a cloud-based vulnerable Android app "VyAPI", to learn about OWASP mobile top 10 vulnerabilities
Senior Test Specialist /Scrum Master
Prowareness
Bangalore
03.2016 - 04.2018
- Test automation using Java and Cucumber framework
- Played the role of scrum master for a team of 5
- Started performing security assessments for internal company websites
- Learned Virtual Box, Docker, Burp Suite, ZAP
Test Specialist / Test Lead
Mindtree Ltd.
Bangalore
01.2009 - 12.2016
- Manual Testing
- Played the role of Test Lead for a team of 4
- Learned Excel Macros, VB Script, Python, PHP, OWASP Top 10, test automation using HP Quality Center
Education
Master of Science - Computer Science
Manipal University
Manipal 08.2009 - 08.2011
Bachelor of Technology - Computer Science Engineering
Biju Patnaik University8
Orissa 04.2004 - 04.2008
Skills
Web app pentesting
undefinedAccomplishments
- Most Promising New Joiner Award | Prowareness
- Entrepreneur of the Month | Prowareness
- Best Speaker Award | Toastmasters
- Unrelenting Dedication Award | Mindtree Ltd.
- 10/10 (Ten on Ten) | Mindtree Ltd.
- Exemplary Conduct Award | Higher Secondary School
Certification
Certified Ethical Hacker
Interests
Binary Reverse Engineering
Web Development
CI/CD
Timeline
Security Analyst Consultant
Arogya.ai
04.2021 - 05.2022
Freelancer
Freelance
01.2021 - Current
Security Analyst
Appsecco
04.2018 - 09.2020
Certified Ethical Hacker
02-2017
Senior Test Specialist /Scrum Master
Prowareness
03.2016 - 04.2018
Master of Science - Computer Science
Manipal University
08.2009 - 08.2011
ISTQB Certification (Foundation Level)
04-2009
Test Specialist / Test Lead
Mindtree Ltd.
01.2009 - 12.2016
Bachelor of Technology - Computer Science Engineering
Biju Patnaik University8
04.2004 - 04.2008
Hobbies
- Playing Chess
- Boxing
- Playing Ukulele / Guitar
- Spending time with my mother
Trainer Experience
- C/C++ Secure Coding Training | Scademy - (Since 2021)
- SecQAtion 2.0: Smart Automation for Identifying Web Security Vulnerabilities | Nullcon Online Training - May 2022
- SecQAtion: Tools and Techniques for Security Tests Automation | Nullcon Online Training - Sep 2021
- The Changing Face of Mobile App Security | Nullcon Masterclass - Nov 2020
- Attacking Web applications using Burp Suite | BSides Delhi - Oct 2019
- Web App Security - Build, Break & Learn | Nullcon Online Training - Mar 2021
- Burp Suite for Web and Mobile Application Security Testing | c0c0n XI - Oct 2018
- Basics of Security Testing | Mindtree Ltd. - Apr 2011
Speaker Experience
- VyAPI - The Vulnerable Hybrid Android App (Tool Demo) | Nullcon Goa - 2020
- VyAPI - The Vulnerable Hybrid Android App (Tool Demo) | Hack In The Box (HITB) CyberWeek, Abu Dhabi - 2019
- VyAPI - The Vulnerable Hybrid Android App (Talk) | BSides Delhi - 2019
- Introducing VyAPI 1.0 (Talk) | c0c0n XII - Data Privacy, Cyber Security & Hacking Conference - 2019
- Android Apps - How easy it is to tear them apart and steal your data (Talk) | ISC2 Offensive Security Conference - 2019
- Attacking Web Applications Using Burp Suite (Workshop) | BSides Delhi - 2018
- Burp Suite For Web and Mobile Application Security Testing (Training) | c0c0n XI - Data Privacy, Cyber Security & Hacking Conference - 2018
Hobbies
- Playing Chess
- Boxing
- Playing Ukulele / Guitar
- Spending time with my mother
Trainer Experience
- C/C++ Secure Coding Training | Scademy - (Since 2021)
- SecQAtion 2.0: Smart Automation for Identifying Web Security Vulnerabilities | Nullcon Online Training - May 2022
- SecQAtion: Tools and Techniques for Security Tests Automation | Nullcon Online Training - Sep 2021
- The Changing Face of Mobile App Security | Nullcon Masterclass - Nov 2020
- Attacking Web applications using Burp Suite | BSides Delhi - Oct 2019
- Web App Security - Build, Break & Learn | Nullcon Online Training - Mar 2021
- Burp Suite for Web and Mobile Application Security Testing | c0c0n XI - Oct 2018
- Basics of Security Testing | Mindtree Ltd. - Apr 2011
Speaker Experience
- VyAPI - The Vulnerable Hybrid Android App (Tool Demo) | Nullcon Goa - 2020
- VyAPI - The Vulnerable Hybrid Android App (Tool Demo) | Hack In The Box (HITB) CyberWeek, Abu Dhabi - 2019
- VyAPI - The Vulnerable Hybrid Android App (Talk) | BSides Delhi - 2019
- Introducing VyAPI 1.0 (Talk) | c0c0n XII - Data Privacy, Cyber Security & Hacking Conference - 2019
- Android Apps - How easy it is to tear them apart and steal your data (Talk) | ISC2 Offensive Security Conference - 2019
- Attacking Web Applications Using Burp Suite (Workshop) | BSides Delhi - 2018
- Burp Suite For Web and Mobile Application Security Testing (Training) | c0c0n XI - Data Privacy, Cyber Security & Hacking Conference - 2018
Online Footprint
- GitHub Repositories - https://github.com/riddhi-shree
- Blog Posts -https://riddhi-shree.medium.com/
- Some More Blog Posts - https://www.riddhishree.com/
- Community Work - https://null.community/profile/9454-riddhi-shree
- Community Work - https://winja.nullcon.net/
- Twitter - https://twitter.com/_riddhishree
- LinkedIn - https://www.linkedin.com/feed/
Hobbies
- Playing Chess
- Boxing
- Playing Ukulele / Guitar
- Spending time with my mother
Trainer Experience
- C/C++ Secure Coding Training | Scademy - (Since 2021)
- SecQAtion 2.0: Smart Automation for Identifying Web Security Vulnerabilities | Nullcon Online Training - May 2022
- SecQAtion: Tools and Techniques for Security Tests Automation | Nullcon Online Training - Sep 2021
- The Changing Face of Mobile App Security | Nullcon Masterclass - Nov 2020
- Attacking Web applications using Burp Suite | BSides Delhi - Oct 2019
- Web App Security - Build, Break & Learn | Nullcon Online Training - Mar 2021
- Burp Suite for Web and Mobile Application Security Testing | c0c0n XI - Oct 2018
- Basics of Security Testing | Mindtree Ltd. - Apr 2011
Speaker Experience
- VyAPI - The Vulnerable Hybrid Android App (Tool Demo) | Nullcon Goa - 2020
- VyAPI - The Vulnerable Hybrid Android App (Tool Demo) | Hack In The Box (HITB) CyberWeek, Abu Dhabi - 2019
- VyAPI - The Vulnerable Hybrid Android App (Talk) | BSides Delhi - 2019
- Introducing VyAPI 1.0 (Talk) | c0c0n XII - Data Privacy, Cyber Security & Hacking Conference - 2019
- Android Apps - How easy it is to tear them apart and steal your data (Talk) | ISC2 Offensive Security Conference - 2019
- Attacking Web Applications Using Burp Suite (Workshop) | BSides Delhi - 2018
- Burp Suite For Web and Mobile Application Security Testing (Training) | c0c0n XI - Data Privacy, Cyber Security & Hacking Conference - 2018
Online Footprint
- GitHub Repositories - https://github.com/riddhi-shree
- Blog Posts -https://riddhi-shree.medium.com/
- Some More Blog Posts - https://www.riddhishree.com/
- Community Work - https://null.community/profile/9454-riddhi-shree
- Community Work - https://winja.nullcon.net/
- Twitter - https://twitter.com/_riddhishree
- LinkedIn - https://www.linkedin.com/feed/
Trainer Experience
- C/C++ Secure Coding Training | Scademy - (Since 2021)
- SecQAtion 2.0: Smart Automation for Identifying Web Security Vulnerabilities | Nullcon Online Training - May 2022
- SecQAtion: Tools and Techniques for Security Tests Automation | Nullcon Online Training - Sep 2021
- The Changing Face of Mobile App Security | Nullcon Masterclass - Nov 2020
- Attacking Web applications using Burp Suite | BSides Delhi - Oct 2019
- Web App Security - Build, Break & Learn | Nullcon Online Training - Mar 2021
- Burp Suite for Web and Mobile Application Security Testing | c0c0n XI - Oct 2018
- Basics of Security Testing | Mindtree Ltd. - Apr 2011
Speaker Experience
- VyAPI - The Vulnerable Hybrid Android App (Tool Demo) | Nullcon Goa - 2020
- VyAPI - The Vulnerable Hybrid Android App (Tool Demo) | Hack In The Box (HITB) CyberWeek, Abu Dhabi - 2019
- VyAPI - The Vulnerable Hybrid Android App (Talk) | BSides Delhi - 2019
- Introducing VyAPI 1.0 (Talk) | c0c0n XII - Data Privacy, Cyber Security & Hacking Conference - 2019
- Android Apps - How easy it is to tear them apart and steal your data (Talk) | ISC2 Offensive Security Conference - 2019
- Attacking Web Applications Using Burp Suite (Workshop) | BSides Delhi - 2018
- Burp Suite For Web and Mobile Application Security Testing (Training) | c0c0n XI - Data Privacy, Cyber Security & Hacking Conference - 2018
Hobbies
- Playing Chess
- Boxing
- Playing Ukulele / Guitar
- Spending time with my mother
Online Footprint
- GitHub Repositories - https://github.com/riddhi-shree
- Blog Posts -https://riddhi-shree.medium.com/
- Some More Blog Posts - https://www.riddhishree.com/
- Community Work - https://null.community/profile/9454-riddhi-shree
- Community Work - https://winja.nullcon.net/
- Twitter - https://twitter.com/_riddhishree
- LinkedIn - https://www.linkedin.com/feed/
Trainer Experience
- C/C++ Secure Coding Training | Scademy - (Since 2021)
- SecQAtion 2.0: Smart Automation for Identifying Web Security Vulnerabilities | Nullcon Online Training - May 2022
- SecQAtion: Tools and Techniques for Security Tests Automation | Nullcon Online Training - Sep 2021
- The Changing Face of Mobile App Security | Nullcon Masterclass - Nov 2020
- Attacking Web applications using Burp Suite | BSides Delhi - Oct 2019
- Web App Security - Build, Break & Learn | Nullcon Online Training - Mar 2021
- Burp Suite for Web and Mobile Application Security Testing | c0c0n XI - Oct 2018
- Basics of Security Testing | Mindtree Ltd. - Apr 2011
Speaker Experience
- VyAPI - The Vulnerable Hybrid Android App (Tool Demo) | Nullcon Goa - 2020
- VyAPI - The Vulnerable Hybrid Android App (Tool Demo) | Hack In The Box (HITB) CyberWeek, Abu Dhabi - 2019
- VyAPI - The Vulnerable Hybrid Android App (Talk) | BSides Delhi - 2019
- Introducing VyAPI 1.0 (Talk) | c0c0n XII - Data Privacy, Cyber Security & Hacking Conference - 2019
- Android Apps - How easy it is to tear them apart and steal your data (Talk) | ISC2 Offensive Security Conference - 2019
- Attacking Web Applications Using Burp Suite (Workshop) | BSides Delhi - 2018
- Burp Suite For Web and Mobile Application Security Testing (Training) | c0c0n XI - Data Privacy, Cyber Security & Hacking Conference - 2018
Online Footprint
- GitHub Repositories - https://github.com/riddhi-shree
- Blog Posts -https://riddhi-shree.medium.com/
- Some More Blog Posts - https://www.riddhishree.com/
- Community Work - https://null.community/profile/9454-riddhi-shree
- Community Work - https://winja.nullcon.net/
- Twitter - https://twitter.com/_riddhishree
- LinkedIn - https://www.linkedin.com/feed/
Similar Profiles
Jalen DoveJalen Dove
Digital Media Strategist at FreelanceDigital Media Strategist at Freelance
Joaquin FletcherJoaquin Fletcher
Photographer/Video Editor at FreelancePhotographer/Video Editor at Freelance
Amelia GilbertAmelia Gilbert
Babysitter at FreelanceBabysitter at Freelance
HAITHAM ALTOUKHYHAITHAM ALTOUKHY
Senior Video Editor at FreelanceSenior Video Editor at Freelance
FATAH GAUSFATAH GAUS
Sr. Service Engineer at Werfen (Instrumentation Laboratory India Private Limited)Sr. Service Engineer at Werfen (Instrumentation Laboratory India Private Limited)