Author Image
Hello World

I'm Aman

Cybersecurity Professional

  • Full name: Aman Kumar
  • Birth Date: August 07, 2001
  • E-mail amykr930@gmail.com
  • Job: Cybersecurity Analyst @ ReliaQuest
  • Address: New Delhi, India

Experienced cybersecurity professional skilled in Penetration Testing, Incident Response, WAF Management, SOC alert triage, SAST/DAST and SCA. Proficient in deep and dark web monitoring, vulnerability management. Secure Code Review, and automation. Expertise in analyzing WAF traffic trends and managing WAF policies. Committed to enhancing security operations and mitigating risks proactively.

Professional Skills

VAPT: Acunetix, Netsparker, Rapid7, Nessus, Burp Suite, OpenVAS
WAF: Akamai, Cloudflare, Fastly
Application Security: SAST/DAST, SCA, WebInspect, MobSF
Tools: Semgrep, SonarQube, Tenable
SIEM: Splunk, QRadar, LogRhythm
EDR: CrowdStrike, SentinelOne, Defender
Data Visualization: PowerBI, Kibana, Excel

My Experience

  • ReliaQuest Era

  • October 2024 - Present

    Security Analyst (Incident Response) - ReliaQuest

    • Utilized ReliaQuest's Greymatter to streamline incident triage processes, enabling faster escalation and efficient decision-making during critical security events.
    • Conducted thorough post-incident reviews to identify root causes, monitor incident lifecycles, and improve future threat mitigation strategies.
    • Led proactive threat-hunting initiatives, identifying potential threats before escalation and improving overall system resilience.
    • Generated detailed incident reports, providing leadership with actionable insights to strengthen organizational security posture.

  • Fareportal Era

  • July 2023 - October 2024

    Security Analyst (VAPT and DevSecOps) - Fareportal India Pvt. Ltd.

    • Spearheaded DevSecOps practices, overseeing application security with SAST, DAST, and SCA tools.
    • Implemented GoPhish and conducted phishing campaigns, enhancing employee awareness of phishing threats.
    • Reviewed and managed Akamai WAF alerts, fine-tuning policies to mitigate threats and reduce false positives.
    • Conducted vulnerability assessments using Nessus and managed patching processes to maintain a robust security posture.
    • Performed internal network VAPT activities, identifying and mitigating infrastructure vulnerabilities.
    • Contributed to ISO 27001 and PCI DSS compliance by implementing security controls and conducting regular audits.
  • August 2022 - June 2023

    Security Analyst Intern - Fareportal India Pvt. Ltd.

    • Conducted security assessments for internal and external applications during release cycles.
    • Monitored the dark web for compromised credentials and phishing threats, initiating takedowns and brand protection measures.
    • Collaborated with third-party vendors for penetration testing of critical customer-facing applications.

My Interest

I'm a tech enthusiast with a flair for dabbling in everything from designing dank meme T-shirts to spinning up Jenkins pipelines just for fun. When I’m not busy daydreaming about F1 drama or rewatching OG movies like Harry Potter, I’m probably arguing over which anime deserves a T-shirt category or trying to make my pets internet-famous. Add a dash of coffee-fueled coding and the occasional existential debate about artists’ tours, and you’ve got me in a nutshell!

  • Music
  • Gaming
  • Photo
  • Reddit
  • Traveling
  • Movies

From the Blog

Showing posts with label DevSecOps. Show all posts
Showing posts with label DevSecOps. Show all posts
Comprehensive DevSecOps Toolchain: Securing Every Step of Your SDLC
No comments:
Post Tags:
Streamlining Container Security: Integrating Jenkins, Trivy, and DefectDojo
Read more »
No comments:
Post Tags:
Integrating DevSecOps into GitHub Actions: The Importance of Secret Scanning and Best Practices
Read more »
No comments:
Post Tags:
Shifting Code Security to the Extreme Left with Semgrep and Git Hooks
Read more »
No comments:
Post Tags:

My Certificates

  • #1

    EC-Council Certified DevSecOps Engineer (ECDE)

    EC-Council Certified DevSecOps Engineer (ECDE)
    • Mastered the integration of security within DevOps pipelines, ensuring continuous delivery and security automation.
    • Gained expertise in security automation tools, vulnerability management, and secure coding practices.
    • Learned advanced DevSecOps methodologies including cloud security, CI/CD pipeline integration, and compliance management.
    • Designed and implemented secure infrastructures as code (IaC) for seamless security across environments.
    • Applied risk management and incident response techniques within DevSecOps practices to improve security posture.
  • #2

    eLearnSecurity Junior Penetration Tester v2 (eJPTv2)

    eLearnSecurity Junior Penetration Tester v2 (eJPTv2)
    • Developed skills to perform penetration testing on web applications, networks, and systems using industry-standard tools.
    • Gained hands-on experience with reconnaissance, vulnerability scanning, and exploiting weaknesses to simulate real-world attacks.
    • Learned ethical hacking methodologies to conduct manual testing and automate penetration testing tasks in various environments.
    • Enhanced knowledge of web application security, including OWASP Top 10 vulnerabilities, and system hardening techniques.
    • Successfully executed post-exploitation and pivoting techniques to demonstrate lateral movement within compromised networks.
  • #3

    Azure Security Engineer Associate (AZ-500)

    Azure Security Engineer Associate (AZ-500)
    • Developed expertise in securing Microsoft Azure environments by implementing robust security controls and managing security posture in Azure.
    • Learned how to configure and manage identity and access, secure Azure resources, and implement advanced network security for cloud environments.
    • Mastered threat protection, monitoring, and responding to security incidents with Azure Security Center, Sentinel, and other integrated tools.
    • Gained hands-on experience with governance, risk management, and compliance (GRC) using Azure Security services and best practices.
    • Gained a deep understanding of the security and compliance needs of Azure workloads and how to implement security policies and configurations for cloud resources.

Get in Touch

Name*


Message*


Feel free To Contact

Got questions? Need help? Just bored? I promise to respond faster than your Wi-Fi at peak hours... well, most of the time. Looking forward to your message! (Unless it’s spam. Please don’t be that person.)

  • New Delhi, India
  • amykr930@gmail.com
  • www.defensenode.co.in/
Created By SoraTemplates