9+ Years’ Experience in Product Security Hello and thank you for taking time to go through my profile. I am a self-learner and passionate about Security Research and Application Security. Have training/hands-on on: Product Security | OSCP | CEH | VAPT | Application Security | Webapp Security | Source Code Review | Secure SDLC implementation | HIPPA | NIST 800-53 | System Hardening | https://medium.com/@Shorty420 #Certified Ethical Hacker(C|EHv8) #Offensive Security Certified Professional (OSCP) #Certified Information Systems Security Professional (CISSP) and hope to acquire some more down the line... ________ # Research paper on Heartbleed Mitigation ________ As we all say, you learn it when you do it, I have been doing (and facilitating) Product Risk Assessment, Business Impact Analysis, Product Security Reports(PSIS/On-Premise Security Questionnaires etc.), driving security decisions/improvements, Threat Modelling, DoD-RMF and NIST 800-53 compliance assessments/documentation, maintaining Product Catalog security databases, developing Critical Security Controls, Security Defect fixes, Secure Static Code Review. I have been working very closely with Product Security Officer, Principal Security Architect, Product Managers, Philips Global Security Team for security deliverables. Individually worked on Extensive Penetration Testing, Developing various Dep-op/Infrastructural tools (Offline remote Microsoft Updates Identifier/downloader/installer and Secure Vault for Windows based on LSA Security), developing Web Sites. Hobbies: Exercising | Music | Movies | Creating Proof of Concept for Vulnerabilities | PentestLab | VulnHub | HackTheBox | Trying doing things that I don't know or I can't do. _________ I wish to see myself grow with knowledge each day and attain great heights in all my endeavors... Thanks :) Mail: "mohitpanwaraws@gmail.com"