Nitish Kumar

Cybersecurity Engineer with over 6 years of hands-on experience in application security, vulnerability management, and secure development practices across cloud and enterprise environments. Proven expertise in implementing Secure Software Development Lifecycle (SSDLC), embedding security into Agile/DevSecOps workflows, and ensuring continuous protection of applications and systems.

Skilled in threat modeling (STRIDE), risk assessment and vulnerability identification across web, infrastructure, and code levels. Experienced in performing Vulnerability Assessment and Penetration Testing (VAPT) using Burp Suite, OWASP ZAP, Nessus, Nexpose and Nmap, as well as Static (SAST), Dynamic (DAST) and Software Composition Analysis (SCA) to secure applications and third-party dependencies. Adept at discovering and remediating critical vulnerabilities including SQL Injection, XSS, CSRF, and authentication flaws.

Demonstrated success in conducting security hardening, compliance audits, and IAM management (including ARCON PAM and role-based access controls). Strong background in incident response and client collaboration, managing high-severity (P1/P2) security incidents and providing actionable recommendations to enhance enterprise security posture.

Proficient in developing and implementing security policies, standards, and governance frameworks to ensure the confidentiality, integrity, and availability of organizational data. Recognized for coordinating cross-functional teams, aligning development and security objectives and driving a proactive, risk-aware security culture.

Bachelor of Technology (B.Tech) in Engineering — 2015–2019
GPA: 7.9