adarshnaik9977

• Contributed to identifying, validating, and documenting security findings for clients. • Manually verified vulnerabilities to ensure accuracy and high-quality reporting standards. • Created multiple reusable security testing playbooks for future client engagements and internal processes. • Manually validated AI-generated vulnerability reports produced by an automated security scanning product. • Triaged and classified scan findings as true or false positives to ensure report accuracy and quality. • Provided feedback on AI-generated outputs to improve the reliability and precision of the scanning product.

• Gained foundational knowledge of GRC concepts and ISO/IEC 27001:2022 requirements. • Reviewed organizational security policies, procedures, and ISMS documentation to understand information secu rity governance practices. • Learned key ISMS processes including access management, incident reporting, asset management, and compliance management. • Developed understanding of ISO 27001 clauses, Annex A controls, Statement of Applicability (SoA), and risk management concepts.