Piyush Malik

I am a highly experienced and detail-oriented cybersecurity analyst with over 5 years of expertise in Vulnerability Assessment & Penetration Testing (VA/PT), cybersecurity training, and security planning. My skill set encompasses a wide range of security domains, including Salesforce Security, Security Architecture Review, Network Penetration Testing, Web Application Penetration Testing, Mobile Penetration Testing, API Pentesting, Cloud Pentesting, CTFs Cracking, Bug Hunting, programming, and cybersecurity instruction.

My proficiency in these areas allows me to comprehensively assess and fortify an organization's security posture. I am adept at identifying and mitigating vulnerabilities, securing network infrastructure, and evaluating the security of web and mobile applications. Additionally, my expertise extends to cloud security, API protection, and the competitive world of Capture The Flag challenges.

I am also proficient in programming languages, enabling me to automate security tasks and craft effective solutions.

Overall, my extensive skill set, dedication, and proven track record make me a valuable asset to any organization seeking to strengthen its cybersecurity defenses and ensure the protection of sensitive data and systems.

Orange Business Services, CyberHub, Gurugram

Senior Information Security Analyst

June 2022 – August 2023

• Strengthened security for external applications connecting to our internal Salesforce

  CRM and our CRM application, ensuring data integrity and access control.

• Enhanced security measures for our internal Salesforce CRM and CRM application,

  safeguarding sensitive information and maintaining compliance.

• Developed and maintained authentication and authorization protocols using Bash and

  Python to secure connections between external applications and our CRM system.

• Conducted source code reviews to identify and address vulnerabilities in both Salesforce and connected applications.
• Led vulnerability assessments and penetration testing efforts to proactively identify weaknesses and threats in our CRM environment.
• Collaborated with cross-functional teams to design, review, and implement software and application architecture security enhancements, ensuring robust protection.
• Proactively addressed day-to-day zero-day attacks by developing and implementing swift and effective security solutions.

Bharti Airtel - Airtel, Electronic-City, Noida

Information Security Analyst (Red Team)

August 2021 – June 2022

• Led and executed comprehensive vulnerability assessments and penetration testing projects.
• Managed and mentored the VA/PT team, driving innovation and efficiency in security testing.
• Developed Bash and Python scripts to automate security processes and enhance testing capabilities.
• Conducted source code reviews to identify and remediate security vulnerabilities in software applications. 
• Monitored threat intelligence sources to proactively enhance security measures.
• Implemented rapid response strategies to secure against zero-day threats and emerging risks.

Recon Cyber Security, New Delhi, Delhi

Information Security Analyst

November 2019 – August 2021

• Led Vulnerability Assessment and Penetration Testing projects, ensuring the identification and mitigation of security vulnerabilities.
• Developed security tools and automation scripts in Bash, PHP, and Python to enhance testing and incident response.
• Conducted thorough source code reviews to identify and remediate vulnerabilities in software applications.
• Led and guided the VA/PT team in comprehensive assessments, promoting effective testing methodologies.
• Provided team and corporate training, enhancing the organization's security awareness and best practices.

Softvet Cyber Security, Luanda, Angola

Information Security Analyst

March 2018 – September 2019

• Conducted various Penetration Testing Projects to identify vulnerabilities and enhance security.
• Developed security tools and automation scripts in Bash, PHP, and Python for efficient testing and response.
• Performed source code reviews to identify and remediate vulnerabilities in software applications.
• Provided corporate and staff training, fostering a culture of cybersecurity awareness and best practices.
• Delivered workshops and seminars on Cyber Security to organizations such as Luanda

  International School, ITEL Instituto Telecomunicações, Sonangol, Sonils, and more.

Yeshiva University, Katz School of Science and Health, New York, NY

Master of Science in Cybersecurity, May 2024

Relevant Courses: Cybersecurity Foundations, Architecture of Secure Operating Systems, Network, Data and Communication Security, Cybersecurity Audit, Digital Evidence and Computer Forensics, Risk Management and Cybersecurity.

Jaipur National University, Jaipur, India

Bachelor of Computer Applications, May 2022