Open to opportunities

Ramiz Khan

@ramizkhan1

Message

Experienced Cyber Security professional with 12+ years Specialist in application security, DevSecOps

India

Message

What I'm looking for

I am looking for challenging projects that allow me to leverage my skills in Cyber Security while fostering continuous learning and growth.

With over 12 years of experience in the Cyber Security domain, I am a Certified Ethical Hacker specializing in DevSecOps and web application penetration testing. My expertise encompasses Dynamic Application Security Testing (DAST), Static Application Security Testing (SAST), and Vulnerability Assessment (VAPT). I am passionate about integrating security into every phase of the Software Development Life Cycle (SDLC) and have a proven track record of enhancing secure coding practices across various teams.

Throughout my career, I have successfully led multiple projects, including the integration of Static Application Security Testing into Azure DevOps CI/CD pipelines, which significantly improved the detection of security vulnerabilities. My ability to collaborate with cross-functional teams and provide guidance on secure coding practices has been recognized by clients, leading to commendations for my work. I am committed to continuous learning and am currently focused on upgrading my skills in areas such as Docker security and cloud security.

Experience

Work history, roles, and key accomplishments

Application Architect Associate Manager

Accenture

Nov 2024 - Present (9 months)

Led the implementation of application security architecture and solutions. Collaborated with cross-functional teams to integrate security into all aspects of the application development lifecycle.

Application Security Vulnerability Testing SDLC

Specialist - Cybersecurity

LTIMindtree

Sep 2022 - Present (2 years 11 months)

Led the integration of Static Application Security Testing (SAST) into Azure DevOps CI/CD pipelines using Fortify SSC. Managed a 5-member application security team, overseeing scan analysis, false positive triage, and report delivery.

DevSecOps SAST Azure DevOps CI CD Threat Modeling Application Security Team Leadership Vulnerability Management

Technical Specialist - I

CitiusTech Healthcare Technology Private Limited

Sep 2018 - Present (6 years 11 months)

Implemented and optimized Secure SDLC processes, integrating security activities at each stage. Conducted application penetration testing using Burp Suite Professional, following OWASP Top Ten guidelines.

Cybersecurity Framework Threat Modeling SonarQube Synopsys Blackduck Qualys Burp suite API Security

Cyber Security Analyst

Network Intelligence India Pvt. Ltd.

Sep 2016 - Present (8 years 11 months)

Performed manual and automated dynamic gray box and black box testing on web-based applications. Analyzed and validated application security testing-identified vulnerabilities and presented them to development teams.

Burp suite Acunetix HP Web Inspect Penetration Testing Application Security HP WebInspect

Software Engineer QA

Core View Systems

Sep 2015 - Present (9 years 11 months)

Performed manual and automated dynamic application security assessments on internal-facing web applications. Worked on HP Fortify to do source code review and identify false positives.

Application Security Source Code Review Manual Testing Functional Testing Test scenarios Quality Assurance

Web Developer

Datamatics Global Services Pvt. Ltd.

Nov 2012 - Present (12 years 9 months)

Developed and maintained the front-end and back-end functionality of websites. Worked in a 24x7 production and maintenance environment, ensuring timely task completion.

Web Development Maintenance Training

Education

Degrees, certifications, and relevant coursework

C-DAC, Pune

Post Graduation Diploma, Advanced Computing

Completed a Post Graduation Diploma in Advanced Computing, focusing on advanced concepts in the field. This program provided in-depth knowledge and practical skills relevant to modern computing challenges.

Mumbai University

Bachelor of Science, Computer Science

Obtained a Bachelor of Science degree with a specialization in Computer Science from Mumbai University. The curriculum covered fundamental principles of computer science, including programming, data structures, and algorithms.