● 7+ years of experience in the domain of Information Security where I have worked in diverse environments. Graduated in Bachelor’s of Technology in Computer Science And Engineering. ● Experience in working on Application Security Assessments like Penetration Testing (PT) and Dynamic Application Security Testing (DAST) based on OWASP Top 10 project. ● Experience in working on Threat Modelling (TM) and Architecture Review (AR) based on Microsoft STRIDE methodology. ● Practicing on PortSwigger Web Security Academy for web application vulnerabilities. ● Experience in working on Third Party Risk Management based on ISO 27001 framework. ● Have internship experience in developing an ASP.NET based web application using C#, SQL, HTML, JavaScript. ● Good at understanding & adopting emerging trends & techniques, addressing industry requirements to achieve organizational objectives. ● Adept at working in high pressure environments with strict deadlines and multiple deliverables. ● Passionate to update knowledge and skills through continuous self-learning. Skills - Application Security ( Penetration Testing, Dynamic Application Security Testing, Threat Modelling, Architecture Review ), Third Party Risk Management, Risk Assessment. Tools - Burp Suite, HCL AppScan (formerly IBM AppScan ), SSL Scan / Qualys SSL labs, Microsoft Threat Modelling tool, NMap, BitSight, Hiperos, Archer eGRC & JIRA for tracking. Frameworks - OWASP Top 10, Microsoft STRIDE, ISO 27001, GDPR.