About Me
Vinesh Redkar is security professional with over 9 years of experience in the security domain across various industries such as Finance, Insurance, Telecom, and government.Currently, He works with Emirates NBD as Senior Security Architect. He is responsible for ensuring security during agile development and implementing secure design during the implementation phase. Additionally, He is also resposible for managing external vendor resources who performs security review and ensure high-quality standards during the execution of security testing. He has extensive hands-on experience in performing security testing (Web, Mobile, Infrastructure), security architecture, vulnerability assessment /penetration testing, calculating risk and resource management. He is an author of “CIS Security Benchmark” for MongoDB Database and Private Bug Bounty Hunter.
- Vulnerability Assessment
- Penetration Testing
- Web/Mobile /API Security
- OWASP/WASC
- Source Code Review
- Infrastructure Security
- Cloud Security
- Artificial Intelligence
- Computational Linguistics
- Information Retrieval
Bachelors of Engineering in Information Technology, 2010
Mumbai University
Experience
Responsibilities include:
- Performed static/dynamic security review of Web/Mobile/API/Thick client application, automated/manual source code inspection, threat modeling, design reviews and penetration testing of internal & external applications to identify vulnerabilities and security defects.
- Presented robust solutions to the technical-non-technical business owners and minimized potential risks in processes by evaluating complex business and technical requirements.
- Created and developed secured applications by delivering professional security architecture and design consultation to product teams.
- Minimized the efforts in creating security reports by designing and creating technical reports templates for security chapter on confluence.
- Responsible for vendor management, including assisting with security assessment activities and ensuring that findings are appropriately prioritized and resolved by coordinating with business stakeholder
Responsibilities include:
- Performed static/dynamic security review of Web/Mobile/API/Thick client application, automated/manual source code inspection reviews and penetration testing on customer applications to identify vulnerabilities and security defects.
- Utilized new techniques to identify and exploit vulnerabilities in customer networks.
- Create comprehensive and accurate reports and presentations for both technical and executive audiences
- Guided clients on mitigating security risks by implementing compensating temporary control as development requires more effort which delays the production go live activity.
- Led and delivered exceptional security efforts for estimation of security assessment engagement by gaining knowledge of client-specific requirements.
- Examined and analyzed source code by utilizing the automated/manual approach to identify the errors in the initial development phases.
- Trained and guided team members to perform security assessment activities, including Web App, Mobile App, and infrastructure security review.
- Spearheaded the delivery process of testing reports within time and according to the customer requirements by delivering quality services, while collaborating with the team.
- Improved client engagement rate by delivering quality of services to the customers.