Arnab Sengupta Email & Phone Number

Tampa, Florida, United States

Security Systems Engineer Offsite: Florida Blue Cross Blue ShieldResponsibilities: Performed vulnerability scanning and compliance monitoring, ensuring agency security standards were met. Interpreted vulnerability scans output and provided quantitative analysis of the results to management. Worked with other IT support teams to troubleshoot and remediate outstanding vulnerabilities. Prepare metrics reports for Upper Management to Illustrate vulnerabilities land scape for the organizationAccomplishments:• Successfully drove down Vulnerabilities across the corporate landscape, by providing Key Metrics reports to Upper Management.

Herndon, Virginia, United States

Responsibilities: Promoted Risk Awareness across different lines of business through extensive collaboration, thereby, increasing ability to assess and mitigate operational risks. Supported Continuous Monitoring for both Infrastructure and Application via ad hoc validation scans and also weekly and monthly scans, Installed and maintained Infrastructure and Application Tools. Researched and explained software vulnerabilities for multiple operating systems. Identified and reported risk exposure in business areas, providing guidance to Senior Management on ongoing risk profile, potential risk triggers and associated remediation activities. Drove Security by developing and reporting on operational risk issues, gaps and vulnerability trends. Gained client trust by answering third-party questionnaire, as related to company security posture. Provided New Hire security training for all employees and contractors, sharing expertise and best practices. Created and maintained documentation such as SSP, SOP and DR plans.Accomplishments:• Spearheaded the development of monthly Vulnerability Scanning program to highlight and reduce Vulnerabilities for both Infrastructure and Applications.• Initiated Risk Assessment on multiple Corporate Applications to highlight potential security defects and vulnerabilities, thereby reducing the count of overall corporate risks.• Key player in the launch and implementation of Corporate New Hire Training material to help reduce insider threat

Alexandria, Virginia, United States

Offsite: CFTC (US Commodity Futures Trading Commission) Washington DC Responsibilities: Performed vulnerability scanning and compliance monitoring, ensuring agency security standards were met. Interpreted vulnerability scans output and provided quantitative analysis of the results to management. Worked with other IT support teams to troubleshoot and remediate outstanding vulnerabilities Provided Security Engineering support for incident detection, analysis, coordination, and response. Installed and maintained Infrastructure Scanning Tools. Leveraged experience in security best practices for IS products and services. Accomplishments:• Spearheaded the development of a Monthly Vulnerability Scanning to Detect and remediate risks for the Agency.• Performed Proctored New Hire Security Training for all new Federal Employees

Reston, Virginia, United States

Offsite: Lockheed Martin Facility Baltimore MDResponsibilities: Coordinated development activities with security group by assessing and ensuring that IS systems met security standards. Provided support to security organization for planning and tracking security activities, including System Security Plan, Certification and Accreditation, POAMs, assessment of security risks and privacy assessments. Established and ensured developers followed secure coding practices to mitigate risks. Responded and resolved security issues identified in Plan of Action and Milestones (POA&Ms). Established Disaster Recovery Plans by participating in annual contingency planning exercises and resolving any issues related to security breaches. Detected application vulnerabilities, including cross-site scripting attacks and SQL injections using IBM App-Scan. Participated in analysis and remediation of Threats, as part of Vulnerability Life Cycle Management. . Conduct routine social engineering tests and clean-desk audits.Accomplishments:• Actively participated in Annual Security Assessment to ensure Agency Applications met FISMA Security controls.

Tysons Corner, Virginia, United States

Offsite: Social Security Administration (SSA)-Woodlawn MDResponsibilities: Evaluated all SSA numbers for rogue modems, using commercial software staged on Virtual Machines. Determined potential loss of sensitive information and implementation of protection controls to reduce risk for the organization. Formatted POAM reports of UNIX, Linux, and Solaris vulnerabilities thereafter, distributing to engineering for remediation. Accomplishments:• As a member of the Security Remediation Team collaborated with System Engineering to drive Remediation on Agency systems.

Columbia, Maryland, United States

Responsibilities: Led yearly audit process by performing reviews of account access and other internal controls. In adherence to SAAS16/70 Standards. Shared security expertise by responding to customer security questionnaires. Developed RFPs and performed onsite security reviews, external audits, penetration tests and vulnerability assessments. Deployed 2-factor authentication via Safenet to all corporate Laptops for VPN access to CMSI Network. Maintained and reviewed and updated Corporate Security Policies and Procedures, as needed.Accomplishments:• Successfully helped the Company pass the SAAS16/70 Audit.• Researched and implemented 2 factor Authentication for Remote Employee Access.

Fairfax County, Virginia, United States

Offsite: Federal Retirement Thrift Investment Banking (FRTIB)-Fair OaksResponsibilities: Ensured compliance to Federal Information Security Management Act (FISMA) and implemented NIST Federal Information Processing Standards (FIPS) and NIST Special Publications (SP800 series).Performed risk assessments, identified and recommended security controls, and wrote multiple systems security plans in accordance with NIST Special Publication (SP800-53) for agency system Supported Information Assurance of Mission operational systems via Patch Management. Developed and maintained Plan of Action and Milestone (POA&Ms) and generated POA&M report for risk identified on multiple applications, Operating systems, and Hardware. Security analysis on technological trends and effects on security of application, addressing social networking media, smart phone, and wireless networking integration Accomplishments:• Successfully helped remediate agency Vulnerability items on POAM

Baltimore, Maryland, United States

Responsibilities: Performed end-to-end vulnerability lifecycle management to reduce corporate risk for the organization. Provided security updates and assistance to upper management by announcing vulnerability solutions. Prepared Global Vulnerability metrics report, driving remediation for enterprise vulnerabilities, tracking violations and escalating, and preparing weekly metrics to illustrate patch deployment for Windows workstations and servers. Worked with Business Information Security Officer, guiding remediation for unencrypted devices in global regions. Scheduled, reviewed and distributed Overdue MS-Patches reports for Windows Workstation, using HP, Radia and Shavlik. Produced (SOP/ Level III) documentation, illustrating day-to-day operations. Scheduled, reviewed and distributed security configuration reports for peers and upper management across multiple lines of business, using Symantec Enterprise Security Manager.Accomplishments:• Successfully drove down Vulnerabilities across the corporate landscape, by providing Key Metrics reports to Upper Management.• Instrumental in helping the Company pass multiple Industry Audits to stay compliant with Industry Standards.• Performed as an Audit Liaison, obtaining critical data used to evaluate departmental SOP. • Selected for Business Travel to provide training to offshore resources.• Leader of a team of operational staff positioned remotely who had the responsibilities of report generation, escalation and remediation as per company guidelines.