piyush malik

I am a highly experienced and detail-oriented cybersecurity analyst with over 5 years of expertise in Vulnerability Assessment & Penetration Testing (VA/PT), cybersecurity training, and security planning. My skill set encompasses a wide range of security domains, including Salesforce Security, Security Architecture Review, Network Penetration Testing, Web Application Penetration Testing, Mobile Penetration Testing, API Pentesting, Cloud Pentesting, CTFs Cracking, Bug Hunting, programming, and cybersecurity instruction.

My proficiency in these areas allows me to comprehensively assess and fortify an organization's security posture. I am adept at identifying and mitigating vulnerabilities, securing network infrastructure, and evaluating the security of web and mobile applications. Additionally, my expertise extends to cloud security, API protection, and the competitive world of Capture The Flag challenges.

I am also proficient in programming languages, enabling me to automate security tasks and craft effective solutions.

Overall, my extensive skill set, dedication, and proven track record make me a valuable asset to any organization seeking to strengthen its cybersecurity defenses and ensure the protection of sensitive data and systems.

Orange Business Services, CyberHub, Gurugram
Senior Information Security Analyst
June 2022 – August 2023
 

• Strengthened security for external applications connecting to our internal Salesforce
  CRM and our CRM application, ensuring data integrity and access control.
• Enhanced security measures for our internal Salesforce CRM and CRM application,
  safeguarding sensitive information and maintaining compliance.
• Developed and maintained authentication and authorization protocols using Bash and
  Python to secure connections between external applications and our CRM system.
• Conducted source code reviews to identify and address vulnerabilities in both Salesforce
  and connected applications.
• Led vulnerability assessments and penetration testing efforts to proactively identify
  weaknesses and threats in our CRM environment.
• Collaborated with cross-functional teams to design, review, and implement software and
  application architecture security enhancements, ensuring robust protection.
• Proactively addressed day-to-day zero-day attacks by developing and implementing swift
  and effective security solutions.

Bharti Airtel - Airtel, Electronic-City, Noida
Information Security Analyst (Red Team)
August 2021 – June 2022
 

• Led and executed comprehensive vulnerability assessments and penetration testing
  projects.
• Managed and mentored the VA/PT team, driving innovation and efficiency in security
  testing.
• Developed Bash and Python scripts to automate security processes and enhance testing
  capabilities.
• Conducted source code reviews to identify and remediate security vulnerabilities in
  software applications. 
• Monitored threat intelligence sources to proactively enhance security measures.
• Implemented rapid response strategies to secure against zero-day threats and emerging
  risks.

Recon Cyber Security, New Delhi, Delhi
Information Security Analyst
November 2019 – August 2021
 

• Led Vulnerability Assessment and Penetration Testing projects, ensuring the
  identification and mitigation of security vulnerabilities.
• Developed security tools and automation scripts in Bash, PHP, and Python to enhance
  testing and incident response.
• Conducted thorough source code reviews to identify and remediate vulnerabilities in
  software applications.
• Led and guided the VA/PT team in comprehensive assessments, promoting effective
  testing methodologies.
• Provided team and corporate training, enhancing the organization's security awareness
  and best practices.

Softvet Cyber Security, Luanda, Angola
Information Security Analyst
March 2018 – September 2019
 

• Conducted various Penetration Testing Projects to identify vulnerabilities and enhance
  security.
• Developed security tools and automation scripts in Bash, PHP, and Python for efficient
  testing and response.
• Performed source code reviews to identify and remediate vulnerabilities in software
  applications.
• Provided corporate and staff training, fostering a culture of cybersecurity awareness and
  best practices.
• Delivered workshops and seminars on Cyber Security to organizations such as Luanda
  International School, ITEL Instituto Telecomunicações, Sonangol, Sonils, and more.

Yeshiva University, Katz School of Science and Health, New York, NY
Master of Science in Cybersecurity, May 2024
Relevant Courses: Cybersecurity Foundations, Architecture of Secure Operating Systems, Network, Data and Communication Security, Cybersecurity Audit, Digital Evidence and Computer Forensics, Risk Management and Cybersecurity.
 

Jaipur National University, Jaipur, India
Bachelor of Computer Applications, May 2022