Suraj Khatkale

Cyber Security Engineer

SISENSE INFO TECHNOLOGY

06.2021 - Current

Key Technical Skills
Application Security Testing: OWASP 2021, Netsparker, Checkmarx.
Testing Methodologies: Manual Testing, Automated Testing, API Testing.
Defect Tracking and Management: JIRA.
Security Analysis: Vulnerability collection, reporting, and tracking.
Domain Expertise: Healthcare, E commerce, and internal client applications.
Development Collaboration: Assisting teams in enhancing security posture and resolving security issues.
Performed comprehensive application security testing using OWASP 2021 methodologies, identifying and remediating attack vectors, vulnerabilities, misconfigurations, and weaknesses in web and API-based applications
Hands-on experience in applying OWASP 2017 and OWASP 2021 penetration testing methodologies to identify and address web application attack vectors
Proficient in creating robust security test cases based on OWASP standards to ensure web application security
Skilled in identifying security threats through detailed black-box testing of web applications
Evaluated potential breach impacts and recommended containment strategies to mitigate risks effectively
Utilized tools like Netsparker and Checkmarx leveraging proxy tools such as Burp Suite and OWASP ZAP to detect and analyze vulnerabilities, providing actionable feedback to development teams
Developed detailed vulnerability reports with screenshots and recommended solutions, ensuring clear communication with clients
Created comprehensive test plans, test cases, and test procedures for manual and automated testing based on business and software requirements, and collaborated closely with development teams to ensure fixes and quality improvements
Managed resources for vulnerability assessment, tracking updates, and project progress in JIRA
Guided and supported development teams on best security practices and solutions for identifying vulnerabilities
Assisted in analyzing source code review results for multiple programming languages, improving the overall security posture of products
Familiar with all stages of the Software Development Life Cycle (SDLC) and adept at integrating security testing methodologies throughout