Seezo.io

Co-Founder

Boring Appsec (newsletter)

AppSec isn't boring. In fact, it’s fascinating! However, the industry tends to focus a lot of energy on the new shiny object. The latest Critical bug or the latest RASP tool or how AI/ML gobbledygook can make the world a better place. The thing is, in addition to keeping up with the latest trends, successful AppSec programs also do the boring things really well (think building an app inventory). This newsletter is about those “boring” things.
Subscribe here: https://boringappsec.substack.com/

Author

Razorpay

Senior EM, Infosec

Staff Security Engineer

Synopsys Inc

Managing Consultant

Cigital, Inc

1. Understand client's application security needs and propose solutions
2. Lead execution of complex projects including architecture risk analysis, red teaming, scalable vulnerability assessments, scalable source code review etc.
3. Explain security concepts, pen test results etc. to various stakeholders in client organization (including developers, architects, compliance teams, CXOs etc.)
4. Assist sales with business development effort across the APAC region

I work with Cigital's APAC clients (Financial, Technology, eCommerce etc.) to understand their Application Security needs and propose appropriate solutions.
In addition, I ensure the quality of deliverables reaching our clients is top-notch. 

I specifically assist clients in the following areas:
* Application Security Testing (web applications, mobile applications, thick clients)
* Source code review, including static analysis using industry standard tools
* Security design reviews
* Building new and improving existing application security programs 

Finally, I work with other leaders in Cigital Asia to grow our consultant pool. This includes assisting in recruitment, training new employees and mentoring our talented consultants.

Associate Managing Consultant

Sr. Security Consultant

- Perform various kinds of software security assessments including Ethical Hacking, Source Code Review and Architecture Analysis
- Assist clients in setting up various software security capabilities
- Work with Developers to mitigate security vulnerabilities 
- Effectively communicate software security related information with various parts of the client organizations including business teams and upper management

Senior Consultant

- Perform various software security duties which help clients improve their application security posture
- Performs Ethical Hacking, Static Code Analysis and develop Threat Models for software
- Help clients develop risk mitigation strategies and implement them.

Security Consultant

- Manual and Automated Static Code Analysis (J2EE)
- Manual and Automated Dynamic Analysis (Penetration Testing)
- Basic Threat Modeling

Associate Security Consultnat

null The Open Security Community

Chapter Lead

COMSYS (Client: FINRA)

- Certify various applications for compliance with the AppSec plan
- Certification involved Web Vulnerability Assessment, Code Scanning, Data Sensitivity Analysis, Network and Firewall Analysis etc
- Performance evaluation of various commercial Web Application Firewall solutions to suit  needs of the organization
- Developed and Support Risk Acceptance Proposal System (RAP). A Java-GWT based ticketing system
- Helped different teams with their Application Security Plan. Involves defining various aspects of their security architecture and brainstorm solutions

Application Security Engineer

Free World Pulse

- Setup Development and Production servers (Ubuntu) for the PCE tool.
- Designed the backup and recovery mechanisms for PCE tool server.

Intern - System Architecture

George Washington University

- Migrated servers of GWU Wiki and Gelman blogs. These websites run on servers with LAMP (Linux, Apache, MySQL, PHP) architecture
- Maintained GWOmeka and Gelman Library servers.

Web and Software Developer

Cognizant Technology Solutions, Bangalore, India

- Developed EET (Error Export Tool), a Java/J2EE tool to retrieve files from a remote database and present it in XML format
- EET Improved response time to client queries by over 30% 
-  Deployed applications on to the UNIX server using the TIBCO   Admin tool
-  Coordinated with multiple teams spread across the globe as part of the Production Support - Deployment team

Programmer Analyst Trainee

Co-founder, Seezo. 

Author of Boring Appsec, a newsletter that covers the essential and often overlooked aspects of building and running successful AppSec programs. 

Co-host of The Boring AppSec Podcast

Taplio

Sandesh Mysore Anand's Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Sandesh Mysore Anand's Linkedin Analytics

Want to drive more opportunities from LinkedIn?

Sandesh Mysore Anand's Linkedin Analytics