Ashish Jha

Experience

• 

  SPRD & Co (Chartered Accountant Firm)

  Mar 2022 - Oct 2022

  Information Security Analyst

  Conducted SOC 2 Type 2 audits to ensure compliance and effectiveness of security controls. Performed vulnerability assessments to identify and remediate security weaknesses. Managed Windows server environments, implementing robust security configurations and access controls. Configured and maintained Checkpoint for enhanced network security. Set up Wazuh for improved security monitoring and incident response.

• 

  NIKSUN

  Oct 2022 - Aug 2023

  Junior Engineer & Product Management

  Developed Python connectors for data transformation and dashboard creation, using RHEL and Docker for deployment in a Linux environment. Managed GitLab for version control and collaboration. Leveraged Splunk and Datadog to analyze workflows, driving product improvements in performance and security. Gained hands-on experience with cloud and system integrations while optimizing the development process.

• 

  Freelance

  Oct 2023 - Jan 2024

  Security Engineer

  Performed vulnerability assessments and penetration testing for clients across multiple domains, identifying critical vulnerabilities and securing applications. Focused on web and network, with a strong emphasis on risk management and security best practices. Delivered detailed reports with findings, prioritizing actionable remediation steps to enhance client security posture.

• 

  KPMG India

  May 2024 - now

  Conducted penetration testing and vulnerability assessments across web, API, thick client, network and mobile applications, identifying and mitigating high-risk vulnerabilities. Specialized in OWASP Top 10 mitigations, providing actionable recommendations to secure digital assets and applications. Collaborated with development teams to implement security best practices and reduce risk exposure. Delivered comprehensive reports and remediation plans, ensuring the highest level of security compliance and operational integrity. Show less

  • Associate Consultant

    Apr 2025 - now

  • Security Analyst

    May 2024 - Apr 2025