Saloni Pasrija

- Threat Modeling and Risk Analysis:

• Extensive experience in STRIDE methodology and threat modeler tools, collaborating closely with customer teams and architects to understand and analyze data flows and architecture diagrams.
• Skilled in replicating architecture diagrams within threat modeling tools, thoroughly analyzing threat mitigation controls, focusing on hosting environments, involved components, and system connections.
• Performed in-depth risk analysis, including impact and likelihood ratings for identified gaps, ensuring robust security postures.
• Proficient in using Archer for comprehensive threat modeling documentation, report generation, and maintaining monthly metrics.

- Cybersecurity Curriculum Development and Training:

• Played a key role in preparing the cybersecurity curriculum for threat modeling, designed for a variety of skill levels.
• Delivered multiple sessions and served as a guest speaker for the Cyber Ambassador Programme, recognized by Ford's Global Cyber Awareness Team for three consecutive years.
• Facilitated sessions on cybersecurity fundamentals as part of new employee orientation programs, imparting key knowledge to fresh talent.

- Penetration Testing and Tools:

• Proactively learning penetration testing, gaining hands-on experience with PortSwigger and Burp Suite to enhance skills in offensive security.
• Recently completed professional cloud security training, with ongoing preparations for industry certifications.

- Collaboration and Leadership:

• Worked closely with global application teams, Learning & Development (L&D) teams, the global cyber awareness team, third-party vendors, Information Control Centers (ICC), and architects, ensuring alignment on security standards and strategies.

• Provided security consultation to application teams, GRC, and Cybersecurity Awareness teams, ensuring compliance with information security policies.
• Managed security tickets, delivering monthly ticket metrics to track performance and improve processes.
• Collaborated with the Networking Team on Zero Trust implementation to enhance network security.
• Experienced with Rally for task and project management.

• Led detection triage using SIEM tools, managed email analysis, and led the CIRT inbox team, with expertise in tools like WireShark, Message Labs, Cisco Umbrella, and Red Line analysis.
• Experienced in incident handling and documentation using Archer, and briefly collaborated with the OGC team on missing vehicle and missing person cases.