Security Tester | QA Specialist

A seasoned QA Specialist 🧪🔍 with 12+ years of experience and a Certified Ethical Hacker🕵️‍♂️💻 boasting over 6 years of expertise in Security Testing. My mission 🎯? To build secure, high-quality software through innovative automation and cutting-edge security testing techniques.

Based in Kolkata, India 🌍, I thrive on solving the toughest challenges in cybersecurity and software testing. Whether it’s reducing manual effort from days to minutes or embedding bulletproof security practices, I am committed to end-to-end delivery that ensures flawless production and rock-solid security compliance🔒🛡️.

• Ownership and E2E Delivery: Safeguard and own the entire project/feature lifecycle, ensuring seamless delivery and post-production support.
• Deliver secured products: Leverage advanced penetration testing techniques to guarantee top-tier security in client product deliveries.
• Vulnerability mitigation: Championing vulnerability management, I empower the engineering team with precise, swift mitigation steps to ensure robust security.
• Compliance: Pioneer in “Shift-left security” and drive adherence to industry-standard compliances like ISO 27001, ISO 27701, GDPR, and PCI-DSS.
• Reduce manual regression efforts: Specialise in slashing man-days to minutes through cutting-edge automation.

• GDPR, PCI-DSS, ISO 27001, ISO 27701, ISO/SAE 21434, TISAX
• OWASP Top 10, SANS 25, MITRE ATT&CK
• Threat Modelling - OWASP Threat Dragon: STRIDE, TARA

• Security Leadership: Launched and maintained single-handedly a Responsible Vulnerability Disclosure Program (RVDP) at UpGrad, using HackerOne platform.
• Vulnerability Management: Managed vulnerability assessments and penetration tests across Web, Mobile, and API platforms.
• Compliance Leader: Spearheaded GDPR, PCI-DSS, ISO 27001 compliance.
• Regression Time Reduction: Reduced regression testing time from 3 days to 21 minutes. Boosted the Efficiency of the existing test suite’s execution time by nearly 65% through optimization.

• Spearheading TARA Assessments for In-Vehicle Infotainment, Instrument Cluster, Radar & Surround View Camera.
• Driving Cybersecurity Excellence by actively applying and delivering critical security concepts and requirements, backed by detailed case studies and comprehensive documentation using Polarion.
• Fortifying Automotive Systems through meticulous analysis, innovative design, and rigorous verification.
• Ensuring Robust Security for boot processes, data storage, and communication across both system and subsystem levels.
• Conducting Advanced Threat Modelling and Risk Assessment using EVSec (C2A), in full compliance with ISO/SAE 21434 and UNECE R155, to strengthen automotive cybersecurity frameworks.
• Identifying and Mitigating Vulnerabilities in SDV components using Blackduck, providing strategic solutions to secure critical automotive infrastructure.

• Slashed Regression Time from 3 Man Days to 21 minutes using Selenium, Java, and BDD Framework. Boosted the Efficiency of the test suite’s execution time by nearly 65%. Awarded Most Valuable Player for consecutive quarters.
• Executed in-depth penetration testing across Web, Mobile, and API platforms to uncover and address vulnerabilities.
• Launched and owned a Responsible Vulnerability Disclosure Program (RVDP) via the HackerOne Platform, managed under “upgrad.com/report-avulnerability.”
• Spearheaded the organisation’s compliance with GDPR, PCI-DSS, ISO 27001, and ISO 27701 standards, and developed comprehensive threat models using OWASP Threat Dragon.
• Contributed to the deployment of Cloudflare WAF, including drafting policies, defining roles, and establishing rules.

• Headed the QA team for the organisation’s three flagship products: Paraphraser, Plagiarism Checker, and Grammar Checker.
• Conducted penetration testing to identify major P0/P1 vulnerabilities, integrated fixes into production with strategic sprint planning, and introduced rate-limiting across all APIs.
• Delivered monthly security issue demonstrations, recommended developers on mitigating P0 vulnerabilities, and addressed mobile app data leakage concerns with clear mitigation steps.

• Automated 2 critical P0 suites covering the end-to-end user journey on the portal, encompassing 12 features and 29 test cases.
• Introduced SonarQube to strengthen internal security testing, and verified vulnerabilities reported by ethical hackers.
• Coordinated with vendors for timely security testing results and conducted internal Vulnerability Assessment and Penetration Testing (VAPT) to proactively address security issues.

• Implemented an automated smoke testing suite using Selenium, Java, and BDD framework, drastically reducing QA time post-production release.
• Crafted comprehensive test plans, integrated automation and performance strategies, and led a QA team of 3 with mentorship, coordination, and cross-functional collaboration.
• Established and integrated customized security testing practices for NAS Athletics, Bed Bath and Beyond, and Bank of America (Mortgage Section), conducting initial vulnerability assessments and seamlessly collaborating with project teams.
• Spearheaded accessibility testing for Bank of America projects.

Led comprehensive ad campaign creative testing, ensuring enhanced campaign reliability and client satisfaction.

Directed comprehensive functional testing (planning, browser compatibility, load, SQL database, and performance testing), facilitated cross-functional sprint planning and issue resolution managed GA releases and ensured seamless stakeholder updates.

Led comprehensive QA for Collabion Charts for SharePoint, ensuring functionality across SharePoint versions with detailed test plans. Utilized Agile methodologies, Atlassian JIRA, VMware, and IIS for efficient project delivery and defect management.

• Enlisted in Top 15 Researchers by the National Critical Information Infrastructure Protection Centre (NCIIPC), Govt of India.
• Recognized in Hall of Fames and Acknowledgments by OpenText, BASF, Telecom Italia, Eventbrite, Zerodha, Tidepool, InStaff and many others.

• Bachelor Of Technology in Information Technology from West Bengal University of Technology (2005 - 2009)