Learning Threat Modeling for Security Professionals

Certified Cloud Security Professional (CCSP)

Creating a Project Schedule and Budget

Defining a Project Scope and Team

New Project Manager Essentials

AWS Certified SysOps Administrator – Associate

AWS Certified Developer – Associate

AWS Certified Security – Specialty

AWS Certified Solutions Architect – Associate

Software Security

Python Data Structures

Using Python to Access Web Data

Programming for Everybody (Getting Started with Python)

Offensive Security Certified Professional (OSCP)

Microsoft Certified: Azure Security Engineer Associate

(ISC)² Candidate

Master of Computer Applications (M.C.A.)

10th CBSE Board

Bachelor of Computer Applications (BCA)

12th CBSE Board

1. Leading Grab's Bug Bounty Program on HackerOne platform and beautifully managing the delicate relationships with security researchers by efficiently and transparently communicating with them and with developers by providing a comprehensive analysis of bug reports and assertively conveying associated real-world risk.
2. Performing Architecture Review for new features and initiatives.

Senior Security Engineer

1. Successfully running the Information Security Program across the company.
2. Ensuring adherence to Secure Development Lifecycle among various engineering functions.
3. Building security standards, policies for secure coding, secure data handling, secure networking, secure crypto implementation, etc.
4. Strategizing application security solutions for developers ranging from security libraries, automated source code review throughout continuous integration and deployment.
5. Building & procuring continuous security scanning, monitoring & analysis of applications, networks, cloud, and internal assets.
6. Evangelizing security among the co-workers through casual discussions, training sessions, documentation, live demonstrations, etc.

1. Building and continuously improving in-house built security products for Cloud and API Security, resolving whole class security issues at scale.
2. Automating Application Security using open source and commercial tools and making it as self-service for developers for reporting security issues as fast and accurately as possible.
3. Building security standards, policies for secure coding, secure data handling, secure networking, secure crypto implementation, etc for web and mobile applications.
4. Performing Incident response by containing the security incidents and investigating the root cause and taking actions to prevent them in the future.

Security Engineering Manager

Oversee and Drive Overall Information Security Program and Roadmap for Funding Societies.

Head Of Information Security

I am responsible for establishing, maintaining, and overseeing the vision, strategy, architecture, and programs to protect information assets while understanding regulatory compliance challenges.

1. Handle Bug Bounty Program for PayPal and Its subsidiaries. 
2. Leading Penetration Testing Efforts.
3. Evaluate applications based on the risk matrix and prioritizing applications.
4. Coordinating Penetration Test Engagements with External Vendors.
5. Assist in formulating Security processes for Internal Team & Third-Party Vendors.
6. Acquire and disseminate knowledge of the latest security technology developments from tech blogs, Bulletin Boards, sites like NIST, SANS, etc
7. Working on Web Application Security, Web Services, Mobile Device Security & Offensive & Defensive Network Security.

Information Security Engineer

1. Responsibilities include Profiling Information assets, Processing change requests, security help desk for external vendors reviews.
2. Facilitate CIA rating by business/ IT for new applications/ major CRs on Asset Registers.
3. Review best practice guides for securing and hardening systems and network devices.
4. Evaluate third-party applications & maintain a register/ repository of security evaluations of the third-party service provider along with associated documents.
5. Assist in formulating the Third Party Security Audit calendar to ensure comprehensive coverage of samples of all types.
6. Monitor the closure of gaps identified in the third-party security audit and additionally disseminate learning across the segment of Third Parties based on sample audit.
7. Acquire and disseminate knowledge of the latest security technology developments from tech blogs, Bulletin Boards, sites like NIST, SANS, etc
8. Subscribe to Google Alerts and other RSS feeds to augment our team's awarenes

Consultant

Null Delhi Chapter Moderator with Rockey. Null Delhi Chapter at USO House, Qutub Institutional Area

Null Delhi Moderator

AKS IT is a provider of a wide range of IT Security Services including Information Risk Management, Cyber Forensics, Mobile Forensics & Cyber Crime Investigation, Information Security Training, Computer Security Incident Response Team (Design, Setup, and Training), and Security Operations Centre (Design & Implementation). The Company has been empanelled by CERT-In (Computer Emergency Response Team – India, Government of India) as an Information Security Auditing Organization (http://www.certin.org.in/security-auditors.htm) and Controller of Certifying Authorities (CCA).

AKS IT Services currently operates from Noida, India, and its global relationship base consists of approximately 110 clients, including Government & PSU organizations, in such high propensity to and potential of servicing sectors as manufacturing, banking, telecom, pharmaceuticals. Our esteemed client list includes the Government of India, Indian Army, Indian Air Force, Airtel, NTPC, NIC, West Central Railways, Delhi P

Infosec Consultant

Security Consulting Senior Manager

15 years in Cybersecurity | Expertise in API & Platform Security. Building resilient systems and fostering diverse team

github

dribbble

gumroad

hashnode

medium

productHunt

substack

projects

youtube

codeforces

adplist

Know about Ishan Girdhar’s work experience, education, bootcamps, certifications, and much more. Ishan Girdhar