Amit SURYAWANSHI
Information Security / Penetration Tester
Information Security Management
Vulnerability Assessment
Penetration Testing
Risk Assessment
IT Security Audit
Professional Status
Consultant
Available
About Me
Experience in IT Security Audit, Vulnerability Assessment etc.
CEH v7 EC-Council - Certified Ethical Hacker,
ECSA EC-Council Certified Security Analyst
RHCE Red Hat Certified Engineer and achieved a Master Degree in Information Security & Computer Forensics from University of East London (UEL)
CEH v7 EC-Council - Certified Ethical Hacker,
ECSA EC-Council Certified Security Analyst
RHCE Red Hat Certified Engineer and achieved a Master Degree in Information Security & Computer Forensics from University of East London (UEL)
- Security Skills: Log Analysis, Traffic Analysis, Firewall Analysis, Network Sniffing, Vulnerability Assessment, various types of Penetration Testing. Internal, External Testing, Manual, Penetration Testing of Operating System, Network Devices, Application Security, Web Application security, Database Testing, Security Awareness Training, IT Administration, Computer Forensics etc.
- Framework: Metasploit, OWASP, OSSTMM, Blackhole, W3af, Samurai etc.
- Standards: CIA; ISMS; CoBIT; COSO (Committee of Sponsoring Organizations); ITIL; ISO 27000/01/02/03/04/05/06/17799; NIST 800 Series guidelines
- Compliance: SCAP; FISMA; CyberScope; CAG 20; IAVA, PCI - DSS; HIPAA; SOX; COPPA; GLBA; NERC
-
Security / Forensics Tools: Acunetix, Burp, Nmap, Nessus, Nikto, Nexpose, Netcat, NSlookup, Netstat, Netsh, NetStumbler, Cain & Abel, THC Hydra, w3af, Hping2, w3af, Kismet , Dsniff, GFI LANguard, Wireshark (Tshark CLI), WinDump (TCPDump CLI), OpenSSL, Packetyzer, Metasploit, OpenSSL, Webinspect, tcpreplay, etc.
Access Data FTK, Encase, Helix, etc. - Operating systems: Red Hat Linux, CentOS, Fedora, Windows 2003 / Vista / XP / Windows 7 / 2000 / Win95-98, BackTrack 5 R3, Kali Linux etc.
-
Programming Languages
C, Bash, Shell, Pearl Scripting - Software Packages/Tools: Open VPN, PHP, MySQL, Squid Proxy Server, IPTables, Shorewall, IPCop, ClearOS, Yum, BIND 9.3, Apache Server, Qmail, Exim, OpenSSH-Server; PuTTY, Xterm, Bacula (Backup & Recovery), Webmin, Citrix, VMware workstation, MS Office, Norton Ghost, Norton / Symantec Antivirus, McAfee VirusScan, Partition Magic, Netstat,
- Technologies: NTP, DNS, DHCP, FTP, Terminal Services, SSH, NFS & NIS, LAMP, LVM, VPN, MTA, LDAP, Active Directory, Syslog, Bacula, TCP/IP, Ethernet /wireless 802.11x, LAN/WAN, switches and hubs, Firewall, Group Policy
-
Networking
CCNA training completed
- Excellent knowledge of security standards and IT governance ( ISO 27001/2, NIST 800-53,CoBIT COSO (Committee of Sponsoring Organizations); ITIL )
- Risk Analysis methods (Octave, ISSA ,COSO, SSAE 16)
- Technical Methodologies skills (OSSTMM, OWASP, PCI DSS)
- knowledge of Open Security Standards ( NIST)
- IT security, IT audit and IT Asset life cycle Management
- Architecting and deploying security technologies
- Security information event management (SIEM)
- Network Security Controls enforcement at gateway and endpoint
- Penetration Testing
- Web Application audit
- Vulnerability assessment
- Reverse Engineering
- Malware Analysis
- Exploit writing
- Binary Analysis
- Honeypots
- Firewalls
