Aneri Vakil

• 6+ Years in the Information Security domain. • Masters in Cyber Security and Incident Response from National Forensic Sciences University • Conducting manual security assessment and pentesting(SAST,DAST) for products, including but not limited to its web, deployment base, and architecture components. • Web Application testing, Mobile app testing, API security assessment, Network PT, system testing, IOT • Threat modeling, Software Composition Analysis, Vulnerability Management. • ISO27001 audits • Review OWASP/CWE/SANS controls and incorporate into an existing checklist. • Hardened various assets including but not limited to OS, DB, AppServer, Firewall, Switches, etc. adhered with CIS, NIST, STIG standards • Coordinate with developers on bug validation and patch verification • Experienced with multiple security tools like Burp Suite, Acunetix, Web Inspect, Blackduck, Nessus, Coverity, Qualys, Appspider, Protecode etc. • Social engineering, red team infra setup. • OSCP, CEH, ECSA