Shiva Kumar Jella

Associate Security Consultant

Varutra

01.2022 - Current

Internal and External Penetration Testing (Plan, Discover, Attack, Report)
Performed penetration testing on TataCliq infrastructure for vulnerability assessment of Internal & External servers and Web Applications
Scanned Internal Servers & External Server for Aditya Birla Group Infrastructure for vulnerabilities & conducted white/gray box penetration testing on the financial systems using Kali Linux, and Nessus.
Web application testing (manually and with tools such as Burpsuite, Dirbuster, Nikto, SqlMap, Nuclei, Hydra, Hashcat, and John-the-Ripper)
Conduct vulnerability assessment and review results. Collaborate with the client's IT staff to rank vulnerabilities. Validate high-risk vulnerabilities on specific targets. Develop a remediation action plan
Establish and/or encourage ongoing vulnerability management process (scan, assess, patch, report).
Performed dynamic and static analysis of web applications using Acuentix AppScan. Analyze systems for potential vulnerabilities that may result from improper system configuration, hardware or software flaws, or operational
Port scan servers using NMAP and close all unnecessary ports to reduce the attack surface
Reviewed policies and act like a Subject Matter Expert on best practice. Verified SSL authentication for secure applications development on Web Servers
Performed live packet data capture with Wireshark to examine security flaws.
Reviewed security documentation and made recommendations. Assisted in conference call meeting with Developer to mitigate vulnerability findings
Ran vulnerability and compliance scanning on test machines and reviewed security standards and Minimum Security Baseline for the client. Assisted on Monthly conference call to discuss implementation and upgrade of critical infrastructure