Looking for a job

Usha Sree

@ushasree2

Information Security Team Lead at Accenture Technologies integrating security tools into CI/CD pipelines and overseeing application security testing.

India

Message

At Accenture Technologies, I integrate security tools into CI/CD pipelines and maintain processes for the DevSecOps program. I also review DAST, web penetration testing, and API penetration testing reports before client delivery.

Across projects including CNH Industrial and Intercontinental Hotels Group, I performed application security scans, penetration testing, and threat modeling. I used platforms such as ArmorCode and Ox to support application security work and coordinate scans with development teams.

Earlier, at Tech Mahindra, I conducted ISO 27001 audits and risk assessments, and performed vulnerability assessments and penetration testing for web and mobile applications. I hold certifications including CEH, ECSA, AZ-500, GCP Associate Cloud Engineer, and ISO/IEC 27001 Lead Auditor.

Experience

Work history, roles, and key accomplishments

Current

Security Delivery Team Lead

Current

Accenture Technologies

May 2022 - Present (4 years 5 months)

Leading security delivery, integrating security tools into CI/CD pipelines, and managing team allocation and performance. Reviewing DAST, web PT, and API PT reports and mentoring team members.

SAST DAST SCA IaC Container Security API Security Secret Scanning Tools DevSecOps CI CD RACI Threat Modeling ArmorCode Black Duck IriusRisk Burp suite Checkmarx SonarQube RAPID7 AppSpider Jira ServiceNow

Information Security Engineer II

Conduent Technologies Limited

May 2021 - May 2022 (11 months)

Performed web application security testing using automated tools and manual penetration testing. Conducted mobile application security testing for Android and iOS.

DAST IBM AppScan RAPID7 AppSpider MobSF Kali Linux Burp suite Mobile Application Security Penetration Testing

Senior Project Engineer

Wipro Technologies

May 2017 - May 2021 (4 years)

Performed security assessments for Microsoft, Apple, Philips, Sulzer AG, and Standard & Poor's projects. Conducted SAST, DAST, threat modelling, and vulnerability management.

SDL Privacy Assessment Azure DevOps HPE Fortify CredScan OSS WebScout ZAP OWASP Dependency Check Secret Detection Burp suite RAPID7 AppSpider SoapUI Postman HP WebInspect Jira ServiceNow GDPR

Security Analyst

Tech Mahindra

Feb 2015 - May 2017 (2 years 3 months)

Conducted ISMS audits, risk assessments, and vulnerability assessments. Performed web and mobile application penetration testing and provided security awareness training.