Bhanu Rekha Vasamsetti

Cyber Security Analyst

GENPACT

Aug 2023 - Present

Performed Static Application Security Testing (SAST) across multiple repositories using APIIRO to identify security vulnerabilities, coding flaws, and compliance gaps during early stages of the SDLC. Integrated APIIRO with GitLab CI/CD pipelines to enable continuous code scanning, automated policy enforcement, and secure build validation before deployment. Conducted detailed source code analysis to detect vulnerabilities such as injection issues, insecure authentication mechanisms, improper input validation, and sensitive data exposure. Performed repository-level risk assessments to identify hardcoded secrets, token exposures, misconfigurations, and outdated or vulnerable third-party dependencies. Applied risk-based prioritization using CVSS scoring, application criticality, and data sensitivity to focus efforts on high-impact vulnerabilities. Mapped applications to their respective repositories and environments to ensure complete security coverage and visibility across the development lifecycle. This contributed to strengthening secure coding practices by providing recommendations aligned with industry standards and secure SDLC guidelines. Experience in performing manual and automated penetration testing to identify vulnerabilities, validate security weaknesses, and assess their potential business impact. Ensured Secure Software Development Lifecycle (SDLC) practices by collaborating with stakeholders and development teams on design reviews, secure configurations, compliance validation, and data privacy controls across multiple network management products. Gathered and analyzed business and security requirements to define security testing strategies, identifying application vulnerabilities and strengthening overall system architecture. Conducted detailed technical security assessments, documenting Findings with clear reproduction steps, impact analysis, and actionable remediation recommendations. Partnered with development teams to remediate vulnerabilities and implement security gates within development workflows to ensure secure releases. Automated security hardening and vulnerability scanning processes, optimizing scan efficiency and generating periodic security reports for stakeholders. Implemented secure architecture principles across applications and infrastructure, and integrated security controls within CI/CD pipelines (including SAST/DAST) to enable early detection of vulnerabilities. Developed and executed security testing scenarios simulating real-world attack vectors to evaluate the effectiveness of implemented security controls. Reviewed and audited Python scripts and application code to identify insecure coding patterns, input validation Flaws, improper exception handling, and dependency-related risks. Performed vulnerability assessments and security testing across web applications, APIs, and infrastructure, conducted risk-based prioritization (CVSS), and collaborated with development teams to remediate issues in alignment with secure coding practices. Worked with cloud environments and containerized deployments (Docker, Kubernetes), addressing security configurations, and applied industry frameworks such as NIST, ISO 27001, and COBIT while monitoring and adapting to evolving threat landscapes.