Sachikanta Sahoo

Senior Security Analyst.

Apr 2020 - Present

• Responsible for the inventory management of all the network and application assets, and privilege management.
• Managing scanners, including deployment and decommissioning, along with health checks and upgrade activities.
• Prechecking the readiness of nodes, checking credentials, scheduling the scan, and performing the scan.
• Post-scan, analyzing the data, preparing the report, prioritizing the vulnerabilities, and communicating with stakeholders.
• Communicate the threat vulnerability, and initiate the plan for mitigation and remediation for the same.
• Knowledge of OWASP 10 and ISO 27001, identifying the threats, and analyzing the risks.
• Drive the discovery, prioritize, assess, and report the stage of the vulnerability cycle for network scans, compliance scans, and application scans.
• Daily monitoring and analysis of the events, which include incident detection, tracking, and analyzing on a real-time basis, and report generation using Fortify, Checkmarx, Veracode, and SonarQube tools.
• Perform the source code scan using the above tools, and identify the vulnerabilities in the source code.
• Having knowledge of SIEM architecture for log monitoring.
• Perform a DAST scan using the Veracode tool, and perform application penetration testing in the Burp Suite tool.
• Reporting the incidents to concerned teams, detecting and resolving the incidents, and escalating the incident whenever the SLA is breached.

Front-End Development Engineer.

Jan 2016 – Mar 2020

• Front-end application design using .NET, Visual Basic, and JavaScript.
• Discussing and negotiating with clients on different products of the organization.
• Managing 8 members of the team and closing all prior security vulnerabilities in a banking organization.