Shabnam Makandar

Identified potential risks within the organization's processes, systems & operations to ensure compliance with laws & regulations, minimize disruptions and enhance operational resilience. Audited functions as Identity Collab & Management,Product Development Services, System Security, NOC, SOC, Endpoint Compliance, Cloud and Data Center,Security Audits for Finance, HR and Legal, Admin audits.Investigated non-compliance ISO 27001, ISO 22301, SOC2 Type 2 controls & advised compliant solutions to the functions.

Exploited OWASP Top 10 vulnerabilities for 22 different web applications. Executed customized security tests as per customer requirements. Proposed solutions to the clients for fixing the escalated issues. Identified High Severity issues like SQL INJECTION, XSS, CSRF, Missing Functional Level Access Control, and SSL/TLS related issues. Developed Testing plan, issue nomenclature and possible solutions for 20+ projects.