Software Security

Microsoft Technology Associate: Security Fundamentals (MTA)

Linux Foundation Cert Prep: Networking (Ubuntu)

Certified Ethical Hacker (CEH)

NSE 2 Network Security Associate

Organized Hour of Code as a SICSR ACM's Student Branch activity, where we went and taught underprivileged students to their schools about computing. Conducted and presented at chapter's events like, "Hack The Code Webinar Series", "Get Crakin' with Git Kraken - MLH Localhost Event", etc.

Secretary

Bachelors

Member

•	Performed penetration testing on a wide range of web technologies to identify critical vulnerabilities affecting the business.
•	Experienced in working with automated and manual penetration testing methodology to deliver quality results.
•	Performed cloud configuration review and penetration testing to find critical misconfiguration in the client’s infrastructure.
•	Automated workflows, created DevSecOps pipelines and performed penetration testing on CI/CD pipelines to find vulnerabilities.
•	Worked on in-house open-source projects like https://securecode.wiki and https://cybersecwiki.com to contribute to the infosec community.
•	Hosted and managed Payatu Hiring CTF, contributed to creating challenges, hosting and maintaining infrastructure, moderating Discord, etc. post that taking interviews of the top candidates to hire them.

Security Consultant

Senior Security Engineer

Active contributor in Facebook Developer Circle: Pune as a core team member. Also contributing to other Facebook Developers Circle: Hyderabad and Bengaluru.

Core Team Member

- Implement and enforce security practices throughout the entire organization.
- Implemented security tooling such as Trivy, Trufflehog, and others, and ensured the integration of GitHub security features into the DevOps pipeline. Collaborated cross-functionally to drive widespread adoption of these security measures.
- Research on different exploits reported by tool to determine it’s impact and exploitability using frameworks like EPSS.
- Conducted penetration tests on feature releases and managed annual third-party security assessments to ensure software security and compliance.
- Implemented a centralized vulnerability management solution to efficiently manage and triage security issues reported by tools like Trivy and ScoutSuite-powered makeshift CSPM.
- Conducted routine access audits, enforced the least privilege principle, restricted access to sensitive components and data to only when necessary, and maintained comprehensive access logs for these instances.
- Played a pivotal ro

Security Engineer

Worked with NodeJS, Firebase and MongoDB and basic front end web development to
develop an admin panel to monitor and manage data and requests from the mobile
application.

Back End Developer

Leading the ACM's Student Branch at Symbiosis Institute of Computer Studies and Research (SICSR)  as a secretary and organizing various activities, workshops and sessions for nurturing the student's growth.

During the times of pandemic (COVID-19), ACM SICSR Student chapter conducted an online workshop on Get Crakin' with Git using Gitkraken in collaboration with Major League Hacking. And I was fortunate enough to get this opportunity to be the instuctor and lead the event. 

It was an amazing experience, interacting with the participants and was really amazed to see the learning curve of the participants in an online workshop.

Instructor

Conducted an online session on introduction to ethical hacking and Capture The Flag(CTF)
competitions, with pre and post event, CTF like challenges.
Interacted with people who wanted to get started in the field of cyber security. 

Speaker

- Managed entire delivery process of all the projects in the company ensuring the quality of work is being delivered to the customer.
- Coordinating with different departments like HR, Marketing, Finance to get the best for the consultants and customers.

Security Consultant - Program Manager

Web Developer & Designer

Week of Learning Student Facilitator 

Addressing a crowd of around 200 students and working professionals at MKSSS's Cummins College of Engineering for Women, Pune.

Demonstrated Python Automation Scripts and basics of Python.

Speaker @ HACKCUMMINS

Working in NAAC accredition project for Symbiosis in which I developed automation tools using Python and Shell Scripting that helped in data cleaning, data migration and data integration.

Developer

- Managing null Study Groups for 6 different domains of information security. Helping the newcomers, get exposed to industry grade learning experience. Responsibilities involved conducting weekly/bi-weekly meetups, finding mentors, etc.
- Moderator for null Community Discord Server.
- Worked in the OSINT project, contributed in gathering information from the government websites and presenting them in an easy-to-consume form.
- Leading Cloud Project related to Cloud Security Baseline.

Volunteer

Security Engineering, Research, Trainer & Speaker

Know about Kumar Ashwin's work experience, education, bootcamps, certifications, and much more. Kumar Ashwin