Summary
Overview
Work History
Education
Skills
Accomplishments
Certification
Timeline
Generic

Shardul Borkar

Mumbai

Summary

Experienced Cyber Security Professional with over 4.2 years of experience in Information Security. Seeking a position in field of Information Security to utilize skills, abilities & knowledge and work with an organization that offers professional growth while being resourceful, innovative, & flexible providing opportunities for advancement.

Overview

4
4
years of professional experience
1
1
Certification

Work History

Assistant Manager

Deloitte Touche Tohmatsu India LLP
12.2023 - Current
  • Part of Cyber Detect & Respond Department of Risk Advisory.
  • Lead onsite governance project for Bank to protect financial assets, maintaining regulatory compliance and preventing cyber attacks.
  • Conducted thorough risk assessments of web applications, APIs to identify and exploit vulnerabilities.
  • Provide comprehensive reports outlining findings, risks and suggested improvements.

Cyber Security Associate

PricewaterhouseCoopers Services LLP
12.2021 - 10.2023
  • Conducted a on-site security assessment for one of the largest government client across Middle East region.
  • Conducted Web application penetration testing, Android/IOS penetration testing and API penetration testing using automated and manual approaches based on OWASP top 10 guidelines for Middle East as well as Indian clients.
  • Lead a periodic security assessment project for the world's largest smart city in order to enhance its security posture.
  • Conducted Configuration reviews using automated tool Nipper and eliminated false positives.
  • Conducted AWS Cloud Configuration review and Cloud Security Assessments for various banks.
  • Discussion of Vulnerabilities with the Application/Development team for sign-off.
  • Conducted Security assessments using Industry standard security assessment tools such as Nmap, Burpsuite, Nessus, Nexpose, Metasploit, Gobuster, Hydra, Wireshark, Netcat, Shodan, OWASP Zap, JohntheRipper, Dex2jar, jadx, Mobsf, Yahzhini, Frida, SQLmap, Postman, Acunetix, Netsparker, Nipper, Genymotion, Nox player, et

Cyber Security Analyst

Network Intelligence India Pvt Ltd
10.2019 - 11.2021
  • Part of Cyber Security Assessment team.
  • Has Executed Black box as well as Grey box Web Application vulnerability pen testing on banking applications, E-commerce applications etc.
  • Conducted internal and external network vulnerability assessment and penetration testing (VAPT), Configuration review of router, switches, and firewalls, VLAN Segmentation Testing. API (REST and SOAP) Penetration testing.
  • Android Application Penetration testing including Static and Dynamic Analysis.
  • Thick client application testing.
  • Has managed projects in team as well as independently. Designed company-wide policies to bring operations in line with Center for Internet Security (CIS) standards.

Education

Bachelors of Engineering - Electronics And Telecommunications Engineering

VIVA Institute of Technology
Mumbai
2017

Diploma in Electronics Engineering -

Government Polytechnic
Mumbai
2013

Skills

  • Web Application Penetration Testing
  • Network Penetration Testing
  • API Security Testing
  • Network Segmentation Testing
  • Configuration Review of Router, Switches and Firewalls
  • AWS Cloud Configuration Review
  • Cloud Security Assessments
  • Android Application Penetration Testing
  • Thick Client Application Pentesting
  • Team Player
  • Self-Motivated

Accomplishments

  • Awarded “Above and Beyond Individual Award” and “Client Appreciation Team Award” from PwC India, for delivering a complex engagement under immense pressure timeline from the client.
  • Awarded “Certificate of Excellence” in recognition of outstanding achievements and contributions to the team from Network Intelligence India Pvt Ltd.
  • Appreciation received from NCIIPC (Govt. of India) for reporting security vulnerabilities in government websites.
  • Recognized by NordVPN as Top Hackers for month of December 2019.
  • Hall of Fame from United Nations, Tibco, and Riipen.
  • Appreciation received from OnePlus, Paytm, University of Latvia, Pon, Nitrosell, and MTN Group for reporting security vulnerabilities.

Certification

  • EC-Council Certified Ethical Hacker (C|EH v10).
  • Certified Information Security Consultant (CISC).
  • Certified Professional Forensic Analyst (CPFA).
  • Microsoft Certified: Azure Fundamentals AZ-900.

Timeline

Assistant Manager

Deloitte Touche Tohmatsu India LLP
12.2023 - Current

Cyber Security Associate

PricewaterhouseCoopers Services LLP
12.2021 - 10.2023

Cyber Security Analyst

Network Intelligence India Pvt Ltd
10.2019 - 11.2021

Bachelors of Engineering - Electronics And Telecommunications Engineering

VIVA Institute of Technology

Diploma in Electronics Engineering -

Government Polytechnic
  • EC-Council Certified Ethical Hacker (C|EH v10).
  • Certified Information Security Consultant (CISC).
  • Certified Professional Forensic Analyst (CPFA).
  • Microsoft Certified: Azure Fundamentals AZ-900.
Shardul Borkar