Mahindra & Mahindra - Lead - VAPT & Compliance

1. Reviewing current system security measures and recommending and implementing enhancements of the organization's technology and IT systems for proactive monitoring and incident control

2. Experience on Vulnerability Assessment and Penetration Testing for Infrastructure, Networks Web Application, Web Services Databases, Mobile etc, Source code review of application code.

3. Experience in Project management, Dashboard/Report management and activity tracker and to integrate security as an integral part during SDLC so as to move from primitive security to security by design to impart customized security awareness trainings to developers on secure coding based on industry recognized best practices such as SANS Top 20 OWASP Top 10 NIST etc.

4. Extensive experience in information security with a focus on security, performance, and reliability.

5. Solid understanding of security protocols, cryptography, authentication, authorisation, and security (Cloud & On-Premise) and various types of penetration testing .

6. Good working knowledge of current IT risks and experience implementing security solutions

7. To review existing security awareness training material and align it to industry best practices To carry out periodic risk assessments to gauge security risks during system design and to monitor and manage them till closure.

8. Conduct vulnerability assessments of applications using various open source and commercial tools, Conduct penetration test and launch exploits using Burpsuite Nessus Metaspoilt Backtrack penetration testing distribution tools sets.

9. Research and maintain proficiency in computer application exploitation tools techniques countermeasures and trends in computer application vulnerabilities Analyze scan reports and suggest remediation mitigation plan.

10. Responding quickly and effectively to all security incidents and providing support to inhouse Teams & participation in escalations.

13. Monitoring and guiding the security team, cultivating a sense of security awareness, and arranging for continuous education.

14. Ability to interact with a cross domain's personnel to explain and enforce security measures.