Kumar Mayank

Experience

• 

  Tata Consultancy Services

  Jul 2021 - now

  Security Engineer

  Core CompetenciesManual Penetration Testing: Conduct in-depth security assessments using over 50 test cases, including SQL injection, cross-site scripting (XSS), and privilege escalation. Generate detailed reports and collaborate with developers to implement effective mitigations.SAST (Static Application Security Testing): Perform static code analysis with tools like Fortify SCA, evaluating and suppressing vulnerabilities based on thorough justification and resolution.DAST (Dynamic Application Security Testing): Execute dynamic testing using WebInspect and other tools, managing and resolving identified vulnerabilities.Security Auditing : Lead security audits for new application launches and UI/UX changes in existing applications. Review comprehensive security reports, including SCA, VA, PT, SAST, DAST, and manual PT.Tools Utilized- Fortify SCA, WebInspect, OWASP ZAP, Burp Suite, Metasploit Pro- Various Kali Linux tools (Nmap, Metasploit, Nikto, Wireshark, sqlmap, Hashcat, Hydra, Ettercap, Social Engineering Toolkit) Show less