The document provides a summary of the candidate's experience in web application security testing. It lists 3 years of experience performing application security testing, vulnerability assessments, and penetration testing on various e-governance projects. It also provides details of the candidate's technical skills which include expertise in OWASP vulnerabilities, SQL injection, XSS, script injection protections and penetration testing tools such as AppScan, Burp Suite, and Nessus. Project experience is listed for 3 projects involving security testing for the Tamil Nadu health systems, Puducherry state service delivery gateway, and the Government of India's eProcurement solution.

1. UMAPATHI. M
+91 9790097761
mumapathi.cse@gmail.com
Carrier Objective
To contribute my best to the organization I work for, by being a good team player and to
grow and glow with the organization with a sense of commitment.
Experience Summary
Total 3.2 Years of experience in Web Application Security Testing, Vulnerability
Assessment and Software Quality Assurances in the e-Governance domain.

 Application Security Testing (Manual & Automated), Vulnerability Assessment and penetration
testing of various e-governance & QAT projects.
 Well-equipped knowledge in Open Web Application Security Project (OWASP TOP 10), Web
Application Security Project (WASP)
 Having real time experience in DDos, SQL Injection protection, XSS protection, Script Injection and
Major hacking protection techniques
 Web Application Security Testing in e-Payment Net banking domain.
 Vast hands-on experience in detecting security defects in Web Application using/ based on AppScan
9.0 [IBM].
 Specialist in dealing with Source code Auditing tools, Penetration testing tools and Vulnerability
scanning tools such as Acunetix, Nessus Vulnerability Scanner.
 Identification of Application Vulnerability and exploit the weakness in the application based on
OWASP Top 10 standard
 Preparation of Document for application security plan, Test Case, Test Scenario, Test design
development &Execution
 Good knowledge in protocols such as TCP, UDP, FTP, SFTP, HTTP, HTTPS, SOAP, SSL and
SMTP
 Vast hands-on experience in using Proxy tools i.e. Burp Suite, Web Scarab
 Handling IT – Services operation as Internet/ LAN Connectivity / Modem or Access point
Configuration / Trouble Shooting.

2. Experience Profile
Employment Summary
Organization Designation Role Duration
Tata Consultancy Services Pvt. Ltd.
Assistant System
Engineer
Cyber Security Analyst June 12- Feb 14
PROFESSIONAL EXPERIENCE (Confidential, June 2012 – Present)
Web Application Security and Vulnerability Assessment
Project 1
Project Name Tamil Nadu Health Systems Project (TNHSP)
Customer Government of Tamil Nadu(World Bank)
Tools Manual Test, App scan 9.0, Web scarab, Pros, Burp suit and Paros.
Description
Tamil Nadu is ranked among the high-performing States in India, in the area of human
development. The State is noted for its low mortality rates and effective healthcare
services. The State has a long track record of innovations in the health sector.
In 2005, the World Bank approved the Tamil Nadu Health Systems Project for a total
cost of Rs. 597.15 crores. The World Bank’s involvement in the project has been
extremely advantageous. It has helped in introducing new approaches in the way the
health sector functions in the State.
Team Size 2

3. Project 2
Project Name Pondicherry SSDG (State Service Delivery Gateway).
Customer Government of Puducherry(Infosys)
Tools Manual Test, App scan 9.0, Web scarab, Pros, Burp suit and Paros, Wire Shark
Description
National e – Governance Plane envisage for providing easy and convenient
service delivery to citizens. This is achieved through common service Centers.
Enables “electronic form” application through state portal and state Service
delivery gateway.
This section provides information on creation of the right governance and
institutional mechanisms, setting up the core infrastructure and policies and
implementation of a number of Mission Mode Projects at the Center, State and
integrated service levels.
Application Security project for 135 e-Services were carried out.
Team Size 3
Project 3
Project Name Government eProcurement Solution of NIC (GePNIC)
Customer National Informatics Centre(NIC),Government of India
Tools Manual Test, App scan 9.0, Web scarab, Pros, Burp suit and Paros, Wire Shark
Description A generic e-Procurement software solution, called GePNIC, has been developed
by National Informatics Centre (NIC) to cater to the procurement / tendering
requirements of the Government departments and organizations. The solution can
easily be adopted for all kinds of procurement activities such as Goods, Services
& Works. It aims at enhancing transparency in all activities relating to tendering
process and non discrimination amongst bidders.
Team Size 2
Functional Skill Set
 Ability to handle a team of Support and co-ordinate smoothly handled the issues.
 Training the new members in the team and getting them productive quickly.
 Strong client facing skills.
 Problem solving capability peered with strong communication skills