About

Girish Shastri is a Principal Engineer at DellEMC with over 11 years of experience in information security auditing and vulnerability management. He has extensive experience in cloud security tool implementation and configuration, team handling, and automation. Girish has been instrumental in training new team members on InfoSec operations and managing operations by acting as a team leader. He has been responsible for discussing ongoing issues with customer higher management in monthly calls and proposing new security enhancements while Cloud Migration and evaluating the tool for the same. Girish has implemented and configured Cloud tools like Rapid 7, Cisco Umbrella, and O365. He has expertise in Rapid 7 cloud tool administration and vulnerability analysis on the Cloud platform and providing their consequences along with the fixes. Girish has also used BurpSuite and Rapid 7 App Sec tool for performing Dynamic Application Security Testing for Cloud hosted applications. He has integrated the Vulnerability Management tool with the ticketing tool for easier management of vulnerabilities. Girish has handled various technical aspects like project documentation, report preparation, and reviewing the documents. He has prepared checklists for internal and external audits by following NIST and CSA standards. Girish has conducted audits and published reports to the stakeholders with the action items. He has also prepared Security Pre-Sales support by responding to RFPs for various clients. Girish has worked as a Cyber Security Consultant at Mindtree and a Technical Lead at PwC. He has a Bachelor's degree in Telecommunication Engineering from Vishveshwaraiah Technological University. Girish has also completed his schooling from Hindu High School Karwar. Girish's relevant experience in the field of information security and vulnerability management is 13.28 years. He has a strong tech stack and is a Senior Software Engineer. Girish is passionate about improving security testing practice by adding/modifying existing documents and other existing material to be in line with current offerings. He is also interested in assisting the practice in looking for new areas of growth in security testing. Girish ensures that all InfoSec activities define in scope are performed without any delays and reviews all InfoSec policies/documents periodically and updates those if any deviations are observed from day-to-day work.