Shubham Yadav
QA Security Engineer
New Delhi
Summary
To seek and maintain full-time position that offers professional challenges utilizing interpersonal skills, excellent time management and problem-solving skills. Ability to handle multiple projects simultaneously with a high degree of accuracy.
Overview
4
4
years of professional experience
4
4
years of post-secondary education
Work History
QA Security Engineer
Globallogic India Pvt Ltd
Noida
06.2021 - Current
- Perform Security testing on Web Applications and Mobile Applications (Android and iOS).
- Developed Test Plans and Test Cases including Security test plans.
- Assisted QA testers to help in Sanity Testing and Automation Testing.
- Helped QA team to Log Defects/Bugs in JIRA and Azure Devops tools.
- Understanding of MSTG, OWASP Top 10 & SANS Top 25 vulnerabilities and their mitigation techniques.
- Hands on experience in discovering and exploiting issues with/without the assistance of tools.
- Strengthened communication skills through regular interactions with others.
- Participated in team projects, demonstrating an ability to work collaboratively and effectively.
- Demonstrated a high level of initiative and creativity while tackling difficult tasks.
Information Security Engineer
Biz2Credit Info Services Pvt Ltd
Noida
03.2019 - 06.2021
- Work on various Projects that includes VAPT of Web Apps, VAPT of Mobile Apps, Network VAPT, Cloud security.
- Black Box and White Box Penetration Testing of Network Infrastructure.
- Worked on Threat Modelling of Web Applications and Mobile Applications based on STRIDE methodology.
- Security hardening of AWS based on the CIS benchmark.
- Applied leading theories and concepts to development, maintenance and implementation of information security standards, procedures and guidelines.
- Performed risk and vulnerability assessments and provided results and recommendations to senior management.
- Provided consultation and technical services on all aspects of information security.
- Developed security metrics and technical analysis to give insight into performance and trends.
Education
Bachelor of Technology - Computer Science And Engineering
Meerut Institute of Engineering And Technology
Meerut 07.2015 - 07.2019
Skills
Web & Mobile Apps VAPT
QA Testing Automation
Test Plans, Cases & Processes
API Penetration Testing
Cloud Security Testing
QA Defects/Bugs Tracking
Threat Modelling
Accomplishments
- Information Security Certified Professional(ISCP)
- Certified Network Security Specialist (CNSS)
- Network Security Associate (NSE 1)
- Network Security Associate (NSE 2)
Timeline
QA Security Engineer
Globallogic India Pvt Ltd
06.2021 - Current
Information Security Engineer
Biz2Credit Info Services Pvt Ltd
03.2019 - 06.2021
Bachelor of Technology - Computer Science And Engineering
Meerut Institute of Engineering And Technology
07.2015 - 07.2019