Personal details
Nirosh J.
Timezone: Berlin (UTC+2)
Summary
I'm currently working as a Senior Security Engineer at 99X Technology, focused on growing in the field of Information Security. I have 3+ years of experience in Information Security and 2+ years of experience in Secure Software Development.
Areas of expertise include: Vulnerability Assessment, Penetration Testing, Web Application Security, Mobile Application Security, Programming (Java, C#, C++, and JS), Secure Software Development, Code Review, Security Process, IDS/IPS, Security Compliances, and Incident Handling
Technical skills
Work Experience
Senior Security Engineer
99X Technology | Mar 2016 - Present
Web Application Security
Design Architecture
Security testing
Vulnerability Assessment
Solution Architecture
Security software
· Responsible for overall security architecture of the applications and system
· Conduct vulnerability assessment and penetration testing for internally developed web and mobile applications
· Conduct security risk assessments
· Implement and maintain security process and strategy inside agile software development life cycle
· Conduct security design reviews for software and platform architectures
· Conduct code reviews for security vulnerabilities
· Perform server-side vulnerability assessments
Personal Projects
2017
Angular
Web Application Security
Cybersecurity
Vulnerability Assessment
Test Automation
Architectural Design
ASP.NET
Security software
· Responsible for overall security architecture of the applications and system
· Conduct vulnerability assessment and penetration testing for internally developed web and mobile applications
· Conduct security risk assessments
· Implement and maintain security process and strategy inside agile software development life cycle
· Conduct security design reviews for software and platform architectures
· Conduct code reviews for security vulnerabilities
· Perform server-side vulnerability assessments
Web Application Vulnerability Assessment & Penetration Testing
2016
Web Application Security
· Conducted web application vulnerability assessment and penetration testing based on OWASP Top 10 using recommended tools. (Metasploit, Kali Linux, SQLMap, OWASP ZAP, Web VA tools, etc.)
Assessed over 50 web applications