Kavya C

About

Total 5.7 years Of Experience and 4+ years of experience in security testing (Web applications, Mobile Applications, Api, Network, Cloud) Conducted vulnerability assessment of multiple servers and network devices. Assisting in review of business solution architectures from security point of view which helps avoiding security related issues/threats at the early stage of project Covertly and verifying vulnerabilities to eliminate false positives Learned Agile environment based on CI/CD and using development approach. Skilled using Various Tools for web application penetration tests such as Burp Suite, OWASP ZAP, Wireshark, Nmap, Nessus. Proficient in understanding application-level vulnerabilities like XSS, SQL Injection, authentication bypass, weak cryptography, Session Management, etc. Skilled in executing OWASP top 10 test cases. I learned application architecture review form few projects. Mentoring and training the team members/interns on application vulnerability assessment Publishing monthly dashboards, taking follow up for closure of vulnerabilities. Manual web application penetration testing using Burp Suite. I am proficient in identifying application-level vulnerabilities like XSS, SQL Injection, CSRF, IDOR, Authentication & Authorization bypass and Cryptographic flaws etc. False positives removal by analyzing the results from automated scanners. Reporting the vulnerabilities with evidence, business impact and remediation steps. Used Nessus and Nmap to perform network wide security assessments. Provided details of the issues identified and the remediation plan for the stakeholders. Using standards like CVSS (Common Vulnerability Scoring System) to provide the severity (Critical, High, Medium, Low) rating to the vulnerabilities identified. Reporting the identified issues in the industry standard framework. Learned security assessments (Web Based Applications, Web services, Penetration Testing and Vulnerability Assessment.) Update with the new hackings and latest vulnerabilities to ensure no such loopholes are present in the existing system. A self-starter with a positive attitude, willingness to learn new concepts and accept challenges.

Skills & Expertise (34)

Work Experience

Education