Gourav Sarswat
Lead Solution Advisor
Pune
Summary
Dynamic professional with extensive experience in leading solution advisory and delivering strategic technology solutions for a diverse range of clients. Proven ability to leverage problem-solving skills to tackle complex challenges and implement impactful solutions. Recognized for exceptional communication and collaboration skills, fostering teamwork and ensuring successful project outcomes. Committed to driving innovation and excellence in every initiative.
Overview
10
10
years of professional experience
Work History
Advisory Lead Solution Advisor
Deloitte USI
05.2022 - Current
- Conducted comprehensive security assessments using DAST, SAST, and SCA methodologies to identify application vulnerabilities.
- Provided guidance on secure software development practices, contributing to design of secure application architectures.
- Collaborated with development teams to integrate robust security measures into software development lifecycle.
- Reviewed source code thoroughly, identifying and mitigating security vulnerabilities while adhering to secure coding standards.
- Scrutinized CI/CD pipelines to ensure seamless integration of security measures throughout development process.
Cyber Security Consultant
Capgemini Bangalore
07.2021 - 04.2022
- Conducted vulnerability assessments and penetration testing for web applications.
- Performed manual and automated testing using Burp Suite, AppScan, and other tools. Identified security weaknesses and provided actionable remediation strategies.
- Collaborated with development teams to enhance application security practices. Documented findings and presented reports to stakeholders for informed decision-making.
Cyber Security Engineer
eMudhra limited Bangalore
04.2019 - 06.2020
- Conducted penetration testing on in-house products to detect security weaknesses.
- Performed vulnerability analysis for web applications, mobile applications (Android), networks, APIs, and thick clients.
- Executed comprehensive assessments to improve security posture across various platforms.
- Analyzed multiple application types and networking environments for potential risks.
Software Engineer
Integra micro software services Bangalore Pvt. ltd.
10.2017 - 03.2019
- Conducted applications penetration testing on web applications for organizational and client needs.
- Executed manual and automated pretesting using tools like Burp Suite and OWASP ZAP.
- Utilized HCL AppScan and Veracode Checkmarx for thorough security assessments of applications.
- Assessed security vulnerabilities in both public and private sector organizations.
Security Test Engineer
STQC IT Services, Ministry of Communication and Information Technology, Government of India, Bangalore
03.2016 - 10.2017
- Conducted penetration testing on client web applications to identify vulnerabilities. Provided comprehensive network security through thorough penetration testing and vulnerability assessments for STQC-IT Services clients.
- Managed internal penetration testing efforts, uncovering critical vulnerabilities that might have otherwise gone unnoticed.
Education
PG-Diploma - IT Infrastructure and System Security
CDAC Bangalore
Bangalore03.2016
Bachelor of Engineering - Computer Science Engineering
Sagar Institute of Research And Technology
Bhopal, M.P.06.2015
Polytechnic - Information Technology
S.V. Polytechnic College
Bhopal, M.P.03.2012
12th - undefined
S.N.G H.Sec School
Hoshangabad, M.P.10th -
Pt. Ram Lal Sharma H.Sec School
Hoshangabad, M.P.Skills
Penetration Testing Risk, AI/ML Application Security Testing, Vulnerability Assessment, Mobile Security, Procedure Documentation, Application security, API Security Testing, Vulnerability Scanning Tool, Teamwork and Collaboration
undefinedTraining
Cloud Computing Successfully completed 45 days training from Appin Technology Pvt. Ltd Bhopal (M.P.) on Cloud Computing.
CAREER FEATURES
- Web Application Penetration Testing
- Tools Used: - HCL AppScan, Burp Suite, Paros, CSRF Tester, SQLMAP.
- Responsibilities: - The penetration testing has been carried out using standard automated tools and manual testing methods. The test simulates hacker’s attacking techniques to discover holes that may compromise the system. It has also been tried to intrude into the systems by using actual exploits, where possible, during the test.
- Vulnerability Assessment
- Environment: - Test environment
- Tools Used: - Tenable Nessus Vulnerability Scanner, This vulnerability assessment consists of two parts. The first part is configuration audit. The system configuration data of the Windows Server machines and Linux server Machines were collected or captured by running scripts directly on the Server machines with privileged (e.g. ‘administrator’) log in.
- Responsibilities: - Involved in recording the scripts and scanning of the servers. Involved in run the Tenable Nessus Vulnerability Scanner tool and scan the servers. Involved in analyzing and verifying the test results and preparation of report.
PROFESSIONAL SYNOPSIS
- Having 9.7 years of IT experience in the area of Security testing of Web Applications, API, Mobile Application (Android) and VAPT.
- Having good exposure on Security Testing Tools like, HCL Appscan, Burp Suite, OWASP ZAP, Tenable Nessus Vulnerability Scanner, OpenVas, Paros, Wireshark, Nmap, sqlmap, Android Studio, Genymotion, Qark, MobSF etc.
- Good understanding of cryptography techniques.
- Good knowledge of security standards like OWASP, CIS etc.
- Good Written and Verbal communication skill.
- Excellent team player and ability to perform well under pressure.
Disclaimer
I hereby declare that above information is correct to the best of my knowledge and belief.
Timeline
Advisory Lead Solution Advisor
Deloitte USI
05.2022 - Current
Cyber Security Consultant
Capgemini Bangalore
07.2021 - 04.2022
Cyber Security Engineer
eMudhra limited Bangalore
04.2019 - 06.2020
Software Engineer
Integra micro software services Bangalore Pvt. ltd.
10.2017 - 03.2019
Security Test Engineer
STQC IT Services, Ministry of Communication and Information Technology, Government of India, Bangalore
03.2016 - 10.2017
12th - undefined
S.N.G H.Sec School
PG-Diploma - IT Infrastructure and System Security
CDAC Bangalore
Bachelor of Engineering - Computer Science Engineering
Sagar Institute of Research And Technology
Polytechnic - Information Technology
S.V. Polytechnic College
10th -
Pt. Ram Lal Sharma H.Sec School