👉 Automating cloud & SaaS Security for SREs

Akash Mahajan  • Peerlist

Trained 15 developers and testers in 
- Security Development Lifecycle
- Basics of TCP/IP
- Basics of HTTP
- Security Principles
- OWASP Top 10
- Finding and testing for 
       + Cross Site Scripting bugs (XSS)
       + SQL Injection ( SQL

Web Security Training for Nokia

Worked with the Airpush team for doing security testing. 

Security Testing for Airpush India

Doing multiple product implementations for Numo Solutions including a web based SMS API and web application. 

Managing web server and other security solutions.

Secure Web Application Development + SMS API for Numo Solutions

Security Code Review, Infrastructure Security Audit.
Recommendations on securing application and user data.

Web Security Consultant as Contractor for IKP Centre for Technologies in Public Health

Worked with their system administrator  on web server configuration, router configuration, mail server configuration. Migration to google apps platform and training


Technical Consultant for Centre for the Study of Culture and Society

Security testing of various platforms, consulting on security of servers, applications, network penetration testing, web application security testing, product security strategies.

Security Consultant for MoveInSync Tech. Sol. Pvt Ltd.

Conducted a 4 day training at Test Yantra with Payatu Technologies.
Conducted Web Security Testing Training for 13 experienced testers.



Web Security Training with Payatu Technologies for Test Yantra Software Solutions

Worked on Setting up their production and development server. Hardened CentOS server with LAMP stack.
Backup processes, secure Apache web server, PHP, MySQL.
Worked on setting up automated backups to the AWS cloud.

Linux Security Consultant for Picsean Media

Tested the infrastructure for the company to ensure the infrastrucutre was hardened and secure before they launch new offerings. 

Security Testing for Zimplee

Security Code Audit for a contest based web application built in a popular PHP framework. 

The security code audit allows them to get their code assessed for security issues and nix them before the web application is deployed.


Security Code Auditor for BigFish

Web Application Security Consultant for XISMAT Consulting

Trained the developers and devops folks of Freecharge in Secure Web Programming 101

Training conducted for Freecharge.in developers on Secure Web Prgramming

Incident Handling
Web Application Security Reviews
Training on Securing PHP/ ASP.net applications
Secure IIS Server Configuration

Security Consultant for Kieon Consulting

Worked with the application team to guide them on doing blackbox testing for web applications using open source tools, backtrack linux and burp suite pro. Answererd their questions about web security testing, security assessment of web appl

Web Security Consultant for Software AG

Working on a web 2.0 startup going to launch in Jan 2009. I did the complete backend, database and security of the web application.

Secure Web App Dev, Webappsec testing for a consumer web2.0 site

Incident Handling 

Worked with them to analyse web server logs, audited web application code a for leading international e-commerce website.

Security Consultant, Web Forensic Analysis, Secure Code Auditing for Multiplex Systems Pvt. Ltd.

Blackbox Security Testing, Guidance and Recommendations on Application Security Risks and Approaches, Security Assurance

Mobile Device Security Testing
Android Security Testing
Android Security Architecture
Content Security and Guidance
AW

Application Security Consultant for Think & Learn Pvt Ltd

Web application Penetration Testing of Enterprise CRM Product.

Penetration Testing for Aptean Software India

Evaluated the server infrastructure on the cloud. 
Tested the RIA based web application for security. 
Recommended certain additional technical processes to ensure reliability and continuing security.