vCISO for clients across industries (manufacturing, pharmaceutical, medical and Infotech). Reviewed cloud and on-prem environments to develop remediation strategies aimed at strengthening security posture via risk assessments.Develop policies, processes to protect corporate data (cloud, on-prem, DC, DR) while allowing technologies and SaaS applications to adhere to business compliance requirements.Maintain project timelines and update executive branch, management regularly.Host security training sessions (where necessary) to foster a culture of " security is everyone's job " !

Part of Cyber Risk Services team to enhance security posture of end client via a prioritized strategy plan.Engaged with various Fortune 500 clients on various projects covering GDPR, disaster recovery assessments, incident handling, threat analysis, digital signatures and PKI among others across healthcare, insurance, retail and technology industries.

Developed SIEM content for clients using ArcSight Enterprise Security Event Management (ESM)

Developed security content for Enterprise Security Event Management (ESM) [formerly HP ArcSight]

Facilitated inter-team project activities: resource allocation, dependencies, change management, milestones.Monitored progress adhering to project development milestones via daily standups, weekly introspectivesConceptualized, designed workflows for a brand loyalty coupon redemption Android application for a startup operating a mobile based enterprise campaign management system for consumer brands.

- Developed web app penetration testing scripts for McAfee SECURE product to detect OWASP web based vulnerabilities.- Maintained vulnerability severity CVSS 2 scores & remediation descriptions sourced from National Vulnerability Database (NVD).- Owned weekly support call with offshore APAC service team to resolve false positive detection issues.- Participated in McAfee’s annual PCI Approved Scanning Vendor (ASV) certification test.

- Tasked with analyzing spyware & contribute to spyware definitions in a 20 member threat research team- Involved usage of a combination of proprietary & other common security tools to monitor activity- Safely analyzed behaviour in a VMWare sandboxed environment- Mainly Windows based spies were analyzed leading to analysis of registry traces, file & network activity

- Convert a static www.iandrinstitute.org to a dynamic database driven https://mylaw.usc.edu/portal/iri- Responsible for requirement gathering & analysis, architecture & design, development & deployment- Provide milestone reports to show progress & design new interfaces to facilitate better data entry & information management- Coldfusion, MSSQL Server based system provides content management, role based access control features

- Member of development team for TeamSite 6.7. Features: flex roles, utility daemon- Created Perl scripts to automate remote execution of Junit test scripts on Solaris and Windows

- Unified & led a workforce of 5 from conceptualization to implementation for Symbiosis Institute of Computer Studies & Research (SICSR) in 40 days in capacity of team leader, lead programmer, system designer- Delegated tasks assessing team core competency.- Trained 3 team members on JSP, servlets and java beans, javascript. Implemented SDLC- Accountable to higher management through project milestone presentations- Java, MySQL, Tomcat & Apache based system- Features included role based access, automated event based e-mailing, profiling, administrative panel, search capabilities, easy file based system configuration- Technologies used JSP, servlets, java beans, javascript, java mail