Mohd Muddassir

Sr. Security Analyst

Thane, IN.

About

Highly accomplished Senior Security Analyst with over 7 years of experience in enterprise Vulnerability Management, specializing in patching governance and compliance across complex IT environments. Proven ability to leverage Tenable Nessus, Python, PowerShell, and Power BI to drive significant reductions in critical vulnerability backlogs and enhance overall security posture. Adept at translating technical insights into strategic recommendations for management and clients, ensuring robust risk mitigation and audit compliance.

Work

Capgemini India Pvt. Ltd.

|

Senior Security Analyst

Mumbai, Maharashtra, India

→

Summary

Led comprehensive vulnerability management and application security initiatives, enhancing enterprise security posture and ensuring compliance across diverse IT environments.

Highlights

Reduced critical vulnerability backlog by 40% through strategic collaboration with Infrastructure, Network, and Application teams, effectively addressing system hardening gaps and driving remediation.

Monitored and enforced patch and vulnerability compliance across 1,000+ IT assets, leveraging CVSS scores and exploit context to prioritize critical and high-risk remediation efforts.

Performed advanced vulnerability validation and penetration testing on selected systems and web applications, including OWASP TOP 10 analysis, to verify exploitability and inform risk prioritization and remediation decisions.

Generated periodic compliance and risk reports, including Power BI dashboards and metrics on vulnerability aging, SLA breaches, and patching trends, to support management decision-making.

Supported audit and compliance engagements by meticulously maintaining vulnerability documentation and remediation evidence, ensuring findings were within audit thresholds and internal governance requirements.

Education

S.D.M College of Engineering, Dharwad affiliated to Visvesvaraya Technological University

Dharwad, Karnataka, India
→
Bachelor of Engineering (BE) Electronics and Communication

Languages

English

Skills

Vulnerability Management

Vulnerability Scanning, Patch Compliance Tracking, CVE, CVSS, Remediation Validation, Tenable Nessus, System Hardening, SLA Tracking, Vulnerability Aging.

Application Security

Application Security Analysis, Web Application Security, Dynamic Application Security Testing (DAST), OWASP TOP 10, Penetration Testing.

Scripting & Automation

Python, PowerShell.

Data Analysis & Reporting

SQL, Excel, Power BI, Visual Studio, Audit and Compliance Reporting, Dashboards, Decision Support.

Risk & Compliance

Risk Prioritization, Compliance Engagements, Audit Support, Internal Governance, Regulatory Expectations.

Collaboration & Communication

Cross-functional Collaboration, Client Communication, Stakeholder Management, Team Leadership.