Gaurav Gogia

- Source code auditing, developing source and sink rules for detecting privacy violations in application code - Led a team to of two interns for a privacy research project within the company - Contributed to privado-core to improve detection of privacy violations in source code

- Security R&D - Infrastructure as Code - DevSecOps research, finding attack paths and detecting misconfigurations through Policy as Code - Worked on Terrascan - static code analysis software for Infrastructure as Code

- Acquired by Tenable in October 2021 - Wrote software for security policies enforcement & security automation to bring down Policy as Code development time from a week to two days - Translated benchmarks into security policies - Wrote security policies, rules, and signatures - Research & Development in DevSecOps

- Developed an internal mobile application for performing internal physical security tasks by the SLP team throughout PAN India. - Reconfigured and modified backend server code, RESTful APIs to work with the mobile application - Performed manual penetration testing through, and provided solutions for vulnerabilities in a software used by the SLP team PAN India - Wrote SOP Documents, Coordinated with the regional investigation teams