Shweta Dhame

Results-driven Application Security Analyst with 2.6 years of hands-on experience at HCL Technologies performing SAST, DAST, and SCA assessments, identifying and remediating vulnerabilities aligned with OWASP Top 10, and strengthening cloud-native application security across AWS, Azure, and GCP. Proficient in Qualys VM, HCL AppScan, and ASOC tools. Skilled in Python and Java for security automation and secure code review.

Certified Google Professional Cloud Security

Engineer, Microsoft Cybersecurity Architect, and ITILv4 professional with a strong academic foundation (9.15 CGPA, B.E.

Information

Technology). Adept at stakeholder communication, executive reporting, and cross-functional collaboration to drive secure development practices.

Application Security Analyst - HCL Technologies - Bengaluru

(2024-02)

• Performed application security scans using AppScan tool and BurpSuite to identify and report vulnerabilities in preproduction environments.
• Conducted in-depth analysis of security vulnerabilities discovered through DAST, SAST, and SCA assessments, aligning findings with the OWASP Top 10 risks.
• Collaborated with development and cross-functional technical teams to provide mitigation strategies and support secure code remediation.
• Created and presented executive summary reports highlighting assessment results, risk ratings, and actionable recommendations for vulnerability mitigation.
• Vulnerability assessment scan using Qualys VM on a monthly and quarterly basis. Asset Management and detailed Inventory Analysis done on a Monthly Basis.
• Performed in-depth secure code reviews to identify insecure patterns, logic errors, and architectural weaknesses across multiple technology stacks.
• Hands-on experience with security tools such as SAST, DAST (OWASP ZAP, AppScan, BurpSuite, Nessus), and SCA for comprehensive vulnerability analysis.
• Worked across AWS, Azure, and GCP to assess security controls, harden cloud configurations, and support cloud-native application security.
• Report Preparation and manually validate the report for removing false Positive results from given report that has been generated by automated scanner.
• Working with Internal Stakeholders and remediation teams for remediation tracking and guide them to the fix the issues.
• Providing enhanced vulnerability analysis and contextual feedback to stakeholders for resolution of newly discovered zero-day vulnerabilities or Critical vulnerabilities.
• Stay current on security industry trends, attack techniques, mitigation techniques, security technologies and new and evolving threats to the organization by attending conferences and networking with peers.
• Suggest changes to senior management using analytics report to support any recommendations. Actively participate in management meeting and strategic planning initiatives.
• Document procedures to validate compliance with security standards through routine self-audits.

B.E. - Information Technology - Savitribai Phule Pune University (2020-01 - 2023-12)

Diploma - Computer Science Engineering - Government Polytechnic, Pune (2017-01 - 2020-12)