Open to opportunities

Vamsi Krishna Pula

@vamsikrishnapula

Message

I am Security Engineer based in Canada. I am looking for position Application Security Engineer.

Canada

Message

What I'm looking for

I am looking for Application Security testing positions like VAPT Engineer,Penetration Tester, Security Analyst,Cloud Security Analyst,DevSecOps Engineer,Application Security Engineer

I have 7+ years of IT experience and of which 5+ years in Application security (Web and Mobile) in different sectors like Health Care, E-Commerce, Banking. I am involved in END to END security Which Includes Threat Modelling ,DAST, SAST and Secure SDLC also I can do effective Manual Penetration testing Using Proxy tools and Kali Linux. I am capable of doing Manual Code Review on Programming languages Java,Javascript,Angular,NodeJS without any SAST tools, working experience in DevSecOps and CI/CD. Expertise in API testing, working experience in Cloud Security (Azure,AWS).

Experience

Work history, roles, and key accomplishments

Senior Application Security Engineer

Innovapptive Inc

Sep 2021 - Sep 2023 (2 years)

Managed End to End Delivery of Application Security Practices and Processes. Initiated Shift-left Approach in
Secure SDLC.
• Conducted thorough security assessments of Mobile and Web products employing both SAST and DAST.
• Pioneered the establishment of security practices and protocols within the organisation, aligning with
OWASP and SANS guidelines.

AppSec SecOps Security CloudSec DevSecOps Security+Web Security Mobile Security

Senior Security Analyst

Tech Mahindra

Mar 2020 - Sep 2021 (1 year 6 months)

Served as the Lead Security Analyst within a dynamic team, demonstrating proficiency in overseeing multiple SAST
projects independently
• Conducted comprehensive manual penetration testing across various domains, including Web, Mobile,
and Thick client Applications, utilising the Burp Suite toolset
• Performed Dynamic Application Security Testing (DAST) scans on client-requested Applications

AppSec DevSecOps Mobile Security Cloud Security AWS Security

Web Application Security Analyst

eclinicalworks

May 2018 - Mar 2020 (1 year 10 months)

Distinguished member of a 10-member Penetration Testing Team, specialising in
• Identifying, researching, validating, and exploiting various different known and unknown security
vulnerabilities on server and client side domains
• Conducted regular manual code review (SAST) utilising Veracode, offering strategic fixes and
recommendations to the development team Worked on IAST (Contrast Security)