HARISINGBHAI KUKANA

Enthusiastic Security / Vulnerability Manager eager to contribute to team success through hard work, attention to detail and excellent organizational skills. Clear understanding of Security testing / Vulnerability management and training information security domain. Motivated to learn, grow and excel in cyber security industry.

• Supervised team of 40 staff members.
• Achieved critical tasks by completing successful deliverables with accuracy and efficiency.

• CISM (Certified Information Security Manager)
• ISO 27001 LA
• MCSE (Microsoft Certified System Engineer, MCP ID: 7241720)

• Penetration Testing of Internet facing assets, with in-depth understanding of application vulnerabilities assessment and remediation.
• Strong understanding of ethical hacking techniques to assure application security.
• Proficient in networking security tools like Nmap.
• Expertise in Qualys tool to perform Vulnerability Management and remediation process for huge number of assets.
• Responsible in create and manage internal processes and standards around the lifecycle of vulnerability management.
• Track vulnerability remediation activities alongside multiple client's security teams.
• Profound knowledge of writing security test scenarios and procedures.
• Very good knowledge and in-depth knowledge of OWASP top 10 and SANS 25 vulnerabilities and its impact on security
  of web applications.
• High flexibility and adaptability
• Handling a team size of 40 resources.
• Performed Web Application pen testing with tools and through manual exploitation.
• Generated security reports on findings on the identification of vulnerabilities and offered remediation procedures to the
  client.
• Educated clients on best practice methodologies to harden their systems and minimize future attacks.
• Found common web site security issues (XSS, CSRF, session fixation, SQL injection, information leakage, application logic
  etc.) across various platforms
• Provided technical review and testing of new technologies such as Enterprise security applications/devices, appliances,
  mobile devices, mobile applications, etc.
• Working with developers and administrators to remediate identified vulnerabilities
• Expertise in mobile application penetration testing and mobile testing frameworks.
• Expertise in using the web pen testing tools like Burp Suite, Acunetix, Fiddler, Fortify WebInspect, Nessus etc.
• Experienced in Android and IOS penetration testing.
• Expertise with mobile application pen testing tools like apktool, dex2jar, MobSF, adb, Drozer etc...