Taiyaba Qureshi
Security Engineer
Bhopal
Summary
Experienced security professional and AI security enthusiast specializing in high-level security consulting services. Recognized for delivering thorough risk assessments and creating customized security strategies, with an emphasis on teamwork and a results-driven approach to ensure flexible and dependable performance. Skilled in threat mitigation and system vulnerability assessments to enhance overall security measures.
Overview
7
7
years of professional experience
6
6
years of post-secondary education
5
5
Certifications
4
4
Languages
Work History
Senior Security Consultant
Aujas Cybersecurity Pvt Ltd
Mumbai
09.2023 - Current
- In my current role, I've had the chance to delve into AI-based applications, focusing on identifying vulnerabilities and security risks. I've developed a keen ability to pinpoint and address threats like Prompt Injection, Indirect Prompt Injection, Insecure Output Handling, Denial of Service, Data Leakage, and LLM Jailbreaking.
- Perform comprehensive information security assessments, including Vulnerability Assessment and Penetration Testing (VAPT) for Application, Web API, Mobile, Network and thick client. This includes activities such as gathering information, identifying threats, creating test cases, identifying vulnerabilities, exploiting them, and providing strategic recommendations through detailed reports.
Senior Security Consultant
Synopsys Inc Pvt Ltd
Bengaluru
07.2018 - 12.2023
- Execute information security assessments (VAPT) including Application and Web API, Network Testing, Mobile (IOS & Android) testing and Static application security testing (SAST), along with Information gathering, threat identification and modeling, test case generation, vulnerability identification and exploitation, creating proof of concepts, communication of vulnerabilities and their technical fixes as strategic recommendation via illustrative reports.
- Direct Client Interaction and coordination with Product Development Teams to resolve reported bugs and various technical issues.
Security Consultant
4x Fast Technologies
Heyderabad
01.2023 - 08.2023
- Perform comprehensive information security assessments, including Vulnerability Assessment and Penetration Testing (VAPT) for Application, Web API, Mobile, Network. This includes activities such -DAST/SAST and GRC based security auditing and ensuring comprehensive vulnerability assessments across the software development lifecycle. Engaged with flydubai development teams to understand their requirements, provide regular project updates, address queries, and present technical reports and findings.
- Deliver training on VAPT, Network, mobile testing, and security compliance to associates and colleagues.
Education
Masters - cyber law and information security
National Law Institute University
Bhopal, MP 08.2016 - 06.2018
BE -
Rajiv Gandhi Technical University
Bhopal, MP 07.2012 - 06.2016
Skills
Vulnerability Assessment and Penetration Testing DAST/SAST
API/Network/Mobile/Thick Client Penetration Testing
Penetration testing for AI systems
Tools: Burp Suite, NMAP, MSF, Nessus, Android Studio, Fiddler, Frida, Objection, Sysinternals Suite, Ghidra, Qualys Veracode
OWASP top 10
ISO27001:2013 (ISMS)
ISO 22301 (BCP)
Incident Response and Business Continuity Planning
PCIDSS
Portswigger AI - LLM Attacks
Cyber Law (IT Act 2008)
Reporting and Documentation
Certification
Portswigger AI - LLM Attacks, 01/01/24
Awards Activities
- Aujas: Bravo Award October 2024
- Vulnerability of the Month (VOM Synopsys), 05/01/19, Secured Second position for exploiting the CORS Vulnerability in a JPMC application.
- Synite:STAR Award, 05/01/19, Our team was awarded first under the best team category for the STAR Award in the Annual Synopsys Employee Awards.
Interests
Volunteering for Civil Rights and Social Action
Environment
Timeline
Senior Security Consultant
Aujas Cybersecurity Pvt Ltd
09.2023 - Current
Security Consultant
4x Fast Technologies
01.2023 - 08.2023
Senior Security Consultant
Synopsys Inc Pvt Ltd
07.2018 - 12.2023
Masters - cyber law and information security
National Law Institute University
08.2016 - 06.2018
BE -
Rajiv Gandhi Technical University
07.2012 - 06.2016