Leading & building the product security engineering for a hyper-growth online collaborative whiteboard platform.

• Solving scalable Security Engineering problems
• Building & Managing Product Security teams
• Working with global teams and creating security culture
• Learning and sharing with the community

Worked with wide variety of teams, clients and community to learn and share pragmatic security knowledge

• Security Architecture, Engineering & Consulting
• Cloud, Containers and Kubernetes security
• Learning and sharing with the community

Joined as a 2nd member of the company. Read More

Appsecco is a specialist application security company that ‘gets’ web security and can advise you on the best route for your business.

We provide simple solutions to problems and don’t confuse our clients with technicalities.

Every team member shares a passion for providing the best possible security solutions that meet the commercial needs and challenges of the clients and organisations we work for.

No matter where they are based they bring the same strategic and pragmatic thinking to ensure that security, operations and commercial goals are aligned to bring you the best possible results.

Joined as a 1st member in the Fortune 1 Network Security team in India and worked collaboratively with the USA team and other teams around the globe.

1. Responsible for the global network security for Walmart eCommerce.
2. Part of Incident Response team. Worked on Palo Alto, ASA, FWSM firewalls.
3. Responsible for assessment of automation tools, latest trends to enhance the current security testing practices,update and enhance the standards used in organisation.
4. Followed Agile-Scrum methodologies for deployment and development activities.
5. Built an in house automation Attack Monitoring & Proactive Analytics solution for Walmart using ELK stack.
6. Acknowledged by CISO, VP for my contribution in improving organisation’s security posture by providing Critical Vulnerabilities in applications and also for internal training among engineering teams in InfoSec.
7. Won best organizational level awards including AOM (Associate Of the Month), Spot Award in entire InfoSec wing

1. Done Pen testing on complete Network as well as all Internal Web Applications
2. Installed & Configured Active Directory, Domain controller services and applied Group Policy Management
3. Installed & Configured Layer 2 & 3 switches and Routers
4. Installed & Configured Open Source Monitoring Servers, Inventory and Ticketing Systems
5. Installed & Configured FTP, BACKUP and WEB Servers
6. Did hardening for Windows, LINUX servers & Networks
7. Configured SIEM Server for Centralized logging and installed Security Onion for Network Packet Capture and analysis
8. Trained staff for configuration and maintenance of servers and systems
9. Researched on Real time Scenarios, Architectures and Tools
10. Worked with various International clients and completed the project successfully

1. Trained more than 3000 people in the field of Information security, Ethical Hacking and Cyber Security by various workshops and talks.
2. Done research on latest online potential threats and security tools and frameworks.
3. Prepared course content for Networking & Security Modules.

1. Trained INDIAN NAVY for 10 days Hands on Ethical Hacking & Information Security Boot Camp
2. Worked with various clients and done corporate training on Network Security & Forensics
3. Done Penetration Testing for Web Applications
4. Done Hardening Networks and Servers for small organizations

Code Vigilant project is created out of the need to have a more secure open source software. It is a known fact that a large number of users use opensource software but a very few of them contribute back in terms of identifying and making these opensource software a more secure piece of software.

This project is initiated with an aim of finding flaws in open source software and making sure that we reach one of the following conclusion.

1. Get the vulnerability fixed and Patch issued.
2. If author is not reachable then make sure the public information is available and spread the details that issues exist with opensource software and discourage its usage.