Cybersecurity, Risk Management, App Sec Arch, SEIM, Cloud Integration, and Digital Ecosystems, building collaborative cultures and leading cross-functional teams and creating solutions that matter.

Currently leading the risk program to maintain Verizon Connect security risk posture. Conduct third party vendor risk assessments of cloud (AWS, GCP and Azure) based platforms such as SaaS, PaaS and IaaS for all lines of business. Work closely with vendors, data owners, development and business team to guide and increase security awareness. With every product review, I seek to improve on effective risk management strategy. Other public cloud assessments include CRM, Salesforce, and SAP etc. Vendor risk management is not limited to data classification and calling out associated risks, rather the assessment comprises of product architecture review, data governance which includes in-depth examination and classification of metadata shared between the vendor and VZC applications and the risk assessment of vendor product. Emphasis is given on technologies used, data encryption and logging to enforce compensating controls.In addition to third party vendor risk assessment, Application assessments are performed when vendor product is purchased by Verizon Connect and is installed in VZC cloud. Product assessment follows the same procedure as vendor risk assessment.G-suite extension security reviews are performed to allow extensions to be a part of VZC accessible for all users of the domain, as well as restricted approvals for extensions such as Google Market place whereby access is granted by creating a separate OU and provisioning users via Okta IAM.Application security assessment are performed for Desktop as well as Enterprise endpoints for VZC users to download and use tools such as Crowd Strike, Netskope, Bomgar etc.

Architect GSAM projects for legally sensitive data, GC process for offshore users, Provide security review, risk analysis and secure audits of Video legacy and mobile applications based on business requirements and designate proper controls as per CPI-810 practices and standard Governance.

Managed Redbox Instant joint venture's Security, Compliance and CIRT team. Implemented and execute secure PCI guidelines and reviews, work through stringent business security exception process, provide Terremark’ s managed security services, built strong relationships with various business stake holders and instill confidence by maintaining security posture of JV.

Worked with Verizon portfolio teams and implemented the security architecture process for Advance Enterprise Services IT data center projects. Also, worked as hands on application Support lead for Security, Compliance, Risk analysis and Disaster Recovery, for projects such as FiOS TV, Web Store Front for hand held devices, Media Manager Online for content storage (voice/data/video), FIOS Digital voice (VoIP) and Connected Home platform (suite of home monitoring services) running on Windows and Unix / Linux systems, built on J2EE and .NET platforms. Supported over 81 windows and UNIX/ Linux based Verizon applications by providing support for over 3600+ servers. Also provided CIS baseline support for Linux based third party application Veveo on 75 servers, which intern provided enhanced search functionality for FiOS / Video TV customers. Key player of the architecture team for Global Search application for Verizon which replaced third party Veveo application to save 3.7M dollars each year in support expenditure and was granted Patent for Publication of Television Content to Television Distribution Sites.

Managed infrastructure, design and deployment of Core Design Services projects such as VNM / AAIS. Provided support for mission critical projects (such as AAIS-CORE, VIMPACT, ERC, STORC, VIST, IVEW, NTAS, VCOS and FIRST), built around C++/J2EE platform. All projects used web logic / Topcom/ irep/ sm/ VZium as middleware, iPlanet , Tomcat an WebLogic as web servers, database used were DB2 UDB 8.x / Oracle 9.x /Informix, SAN technologies included VUS and EMC storage, Sentinel to monitor serves, Espx for job scheduling and VCS/ Service Guard for high availability. Other software’s used are MQ series and Visibroker as well. Security functions include, implementation of Static source code control using HP Fortify and Dynamic reviews using Nessus tool for Web App vulnerability scanning. Established Legal and Compliance mandate, participate in audits of various Verizon legacy projects. Actively deployed alternate sites for annual disaster recovery and planning purposes, by making sure all firewalls and fail over systems work seamlessly and minimize unplanned impact to the customers. .unplanned impact to the customers.

Infrastructure Security lead for Development and Environment Platform Services (DEPS) supporting wholesale/retail businesses, running J2EE applications on Web logic platform. Implement Security, Compliance and Audit controls for multiple DEPS projects as per Verizon Network baseline review and CPI-810 policies. Created baseline CIS images of UNIX operating systems. Automated server upgrades & deployments, Migration and Maintenance. Researched, Evaluated, and Recommend Verizon specific Security product deployment via secure IPM tool, end to end secure release implementation, covering a bunch of UNIX and Intel servers, 5 environments (Prod, STE, UAT, SysTest, Integration and development) supporting 7 applications (wholesale Desktop, Collections, Bankruptcy, Adjustment approval, WBV, WCIT, ODS). Implement LDAP and Single SSO (Site minder Agent), Secure Web Logic portal & integration with middleware, Documentum for running DFC libraries in a clustered environment, eContent Server 5.2.5 and WebTop 5.2.5, as a proof of concept, Attachmate for load balancing and securely configuring runtime services, VCS for high availability and Visibroker etc.

Infrastructure Security lead for Development and Environment Platform Services (DEPS) supporting wholesale/retail businesses, running J2EE applications on Web logic and WebSphere platform.

Senior Project Engineer supporting projects for countries in Europe/ Caribbean/ North America/ Asia Pacific and Latin America by providing mission-critical customer service data to Citigroup banking operations, with requirements for high-availability and strong data Security.