Sign In

Avinash Jain

Security Engineering at CRED

Avinash Jain is an experienced cybersecurity professional who held the position of Security Engineer at CRED from August 2020 to July 2021. During his tenure, he contributed to enhancing the company's security infrastructure, particularly leveraging tools like AWS VPC Traffic Mirroring for network inspection and monitoring sensitive transactions and data.134

Currently, Avinash leads security efforts at Quince, a role he has held since August 2023. Previously, he worked at Microsoft as a Product Manager for the Identity Platform (July 2021 - August 2023) and has also contributed to security at companies like Blinkit (formerly Grofers), Expedia Group, and MakeMyTrip.4

Avinash is also an Information Security Researcher and Ethical Hacker, known for identifying vulnerabilities acknowledged by major organizations like Google, NASA, Yahoo, and VMware. He actively shares his insights through blogs and conferences such as Defcon and ThreatCon.24 His LinkedIn username is avinashjain619.34

Highlights

May 8 · linkedin

A high CVSS score doesn't always necessarily translate to a critical risk for your company. What I've learned is that relying solely on standard CVSS methodology scoring can overlook contextual nuances that are crucial for accurate risk assessment.

  1. Uniqueness in Attack Surface: Generic CVSS scoring may not capture the specific impact of vulnerabilities on your systems. Factors like mitigation strategies and exploitability in your environment can greatly influence the actual risk posed by a vulnerability.

  2. Industry Context Matters: Not all vulnerabilities have the same impact across different industries. A vulnerability impacting a financial institution can be far more devastating than the same issue in a retail setting hence tailoring the vulnerability management approach to the industry's risk landscape is crucial.

  3. Risk Tolerance is Key: Different organizations have different risk tolerance level. While CVSS provides a baseline, it's crucial to adjust scores to align with your company's risk appetite.This ensures prioritizing vulnerabilities that pose the greatest threat to your organization.

Customization and adaptation of CVSS scores may be necessary to ensure they provide meaningful insights and support informed decision-making within your organization but at some point of time you might need to build our own customized scoring system referencing standard CVSS. #Security #CVSS #RiskAssessment #Cybersecurity #VulnerabilityManagement

Related Questions

What specific security measures has Avinash Jain implemented at CRED?
How does Avinash Jain's experience at Microsoft influence his approach to security at CRED?
What are some notable vulnerabilities Avinash Jain has discovered in his career?
How does Avinash Jain contribute to the cybersecurity community through his blog and speaking engagements?
What challenges does Avinash Jain face in maintaining the security of CRED's infrastructure?
Avinash Jain
Avinash Jain, photo 1
Avinash Jain, photo 2
Add to my network

Location

Gurgaon, Haryana, India