Ganesh Kumar Sundararajan

Experience

• 

  HCLTech

  Nov 2011 - Feb 2020

  Technical Lead

  Application Security Lead and Developer- Perform end to end application vulnerability assessment - dynamic application security testing, static code analysis, penetration testing and Threat Modeling.- Produce written summaries of security vulnerabilities, code audits and security evaluations.- Work on security test plan preparation and support customer request for proposals - contribute for PoC and project estimation.- Review security assessment reports of peer team members.- Manage security team - conducted meetings and established security awareness program.- Developed web and thick client applications from the scratch.- Perform application enhancements as per client requirements by adding functionalities to the existing applications that were developed using various technologies. Show less

• 

  Cognizant

  Feb 2020 - Jun 2021

  Senior Security Specialist

  Application Security Architect - Secure SDLC Assessment- Perform Secure SDLC assessments of corporate green field (new) and brown field (existing) applications.- Perform security requirements, application architecture review, design review, threat modeling and deployment review for corporate applications.- Validate on dynamic application security testing and static application security testing reports.- Perform review on privacy impact assessment report, business impact assessment report, data criticality and asset criticality categorization.- Created secure coding guideline document for development team that was published in internal corporate security portal.- Supported for enhancing the internal security requirement controls and helped peer team members by reviewing security assessment reports. Show less

• 

  Accenture

  Jun 2021 - now

  Security Delivery Associate Manager

  Security Architect- Perform security requirements, application architecture review, design review and threat modeling for internal project requirements. - Perform dynamic application security testing and static code analysis for client applications in their environment. - Co-ordinate with development team in completing CI/CD pipeline automation for implementing automated security code scans. - Provide guidance to development team in remediating security flaws and application vulnerabilities. - Mentoring internal team members on various security areas. Participate in team security assessment application and report walkthrough meetings. - Lead team status calls and review team deliverables including security assessment reports. Show less