Web Application Security | Team Leader
Arif Systems
- Successfully led the team to implement robust SQL injection prevention mechanisms using ModSecurity and NGINX. Configured ModSecurity as a Web Application Firewall (WAF) to detect and block SQL injection attacks, and integrated it with NGINX for efficient traffic management and enhanced security. Conducted comprehensive security assessments and penetration testing to ensure effectiveness of implemented solution.
- Set performance expectations for team, monitoring progress towards goals and providing constructive feedback as needed.
- Applied industry best practices in web application security, including input validation, use of prepared statements, and regular security audits. Advocated for continuous improvement in security measures and kept abreast of latest threats and mitigation techniques.
- Leveraged various tools such as Certbot Let's Encrypt for SSL/TLS certificates, Sendmail for email notifications, and Burp Suite for vulnerability scanning, ensuring comprehensive security posture for web applications.
- Created detailed documentation for deployment and configuration of ModSecurity and NGINX. Provided training and support to team members and stakeholders on importance of SQL injection prevention and use of security tools
- Safeguarded sensitive client data by adhering to strict cybersecurity protocols during system setup and ongoing maintenance activities.
