Manisha is an experienced Senior Manager in Risk Advisory practice, with over 13 years of experience in cyber security and software development. She has strong technical background with focus into Secure SDLC, DevSecOps and application security domains. Global experience in delivering project of various size and scale for multiple global clients in different geographies (US, India, and UK). Played subject matter expert and Project delivery manager for various security projects and helped clients in establishing and enhancing security programs. Area of Expertise: • Application security testing (Secure design review, Threat Modeling, SAST, DAST, and Penetration Testing) • Application security strategy - SSDLC gap assessment, maturity assessments based on OWASP SAMMs, Building AppSec Program Roadmap, Building AppSec security controls baseline, and defining security • guardrails • Vulnerability Management and Remediation programs • Network Vulnerability assessments and Network Penetration testing • Security Architecture for cloud native applications. Experience on Azure, AWS and OCI cloud platforms. Technical Skills: • Security Standards: OWASP Top 10, SAMMs, ASVS, NIST SP 800-53, ISO27001 • Cloud platforms: AWS, Azure, Oracle OCI • Security Products: Fortify Product Suite, Appscan, BurpSuite, IronWASP, Tenable/Nessus, Wireshark, Nmap, Qualys, Kali Linux, Metasploit • Scripting: Shell, Python, Perl • Programming: C, C++, Java, Android Development, Matlab • Software Development tools: GitHub, Jenkins, SVN, Jira, Confluence, Linux debug tools, Gdb, Gcov, Purify, CUnit Framework, Eclipse, NetBeans, Android SDK/NDK, Visual studio • Hardware / Operating Systems: Linux, Windows • Middleware / Databases: MySQL, MongoDB Development Experience: Design and developed features and protocols as per 3GPP standard specifications using C for Radio access network entity eNodeB(network router) in LTE architecture. • Designed and developed features on L2 network stack for RLC, PDCP and MAC layers. • Implemented multiple utility modules and plugins to support feature development and testing e.g. Wireshark plug-in for network Layer1 to analyse the network traffic and identify the packet header.