Avinash R. Email & Phone Number

Flowood, Ms, Us

Jackson, Mississippi, United States

• Conducted thorough vulnerability assessments and penetration tests on web applications, networks, and systems.• Developed and implemented comprehensive security protocols and response plans.• Collaborated with IT and development teams to ensure security best practices were integrated into the software development lifecycle.• Provided training and guidance on vulnerability management and cybersecurity awareness.• Prepared detailed reports and presented findings to senior management and stakeholders.• Performed regular security audits and vulnerability scans to identify potential threats.• Assisted in the development and enforcement of security policies and procedures.• Analyzed and responded to security incidents, providing remediation recommendations.• Maintained up-to-date knowledge of emerging cyber threats and vulnerabilities.• Collaborated with external partners and vendors to enhance security measures.• Monitor and analyze network traffic and security alerts.• Investigate intrusion attempts and perform in-depth analysis of exploits. • Provide network intrusion detection expertise to support timely and effective decision making of when to declare an incident. • Conduct proactive threat hunting related threat research. Review security events that are populated in a Security Information and Event Management (SIEM) system.• Analyze a variety of network and host-based security appliance logs (Firewalls, NIDS, HIDS, Sys Logs, etc.) to determine the correct remediation actions and escalation paths for each incident.

Phoenix, Arizona, United States

• Performed in-depth systems and network security analysis of intrusions to the network, applications, operating systems, firewalls, proxy servers, malware and intrusion detection/analysis using multiple tools like SIEM, firewalls, DNS, HIDS, NIDS, proxies, network packet analyzers (Wireshark), malware analysis.• Involved in various projects includes setting Up/Down Monitoring of ForcePoint Proxies & FireEye appliances, determine evaluate FireEye Web Capacity on FireEye Email devices.• To onboard device logs into Accenture MSS for threat detections and crowd Strike logs will feed into Accenture MSS for anomalies. • Review/Investigate alerts for new and ongoing tickets from Crowd Strike.• Sandboxing POC with FireEye, CheckPoint, and Defender ATP appliances.• Directly administered ForcePoint Proxy, FireEye NX & EX, series appliances, McAfee Email Gateway and Source Fire and McAfee IDS IPS daily.• Proofpoint for sandboxing, antispam and antimalware for email.• Used malware (APT) analysis to develop IDS signatures (Snort), FW rules, AV signatures, Fire Eye, and create Accenture MSS/Log Rhythm channels/reports for APT specific threats.• Designed, developed, and implemented Maxim's Vulnerability Management Program which included the deployment and management of the Beyond Security Advanced Vulnerability Detection System AVDS.• Lead of the continuous Vulnerability assessment team using Nessus Security Center and Log Rhythm Security Event Management for daily security check.• Responsible for Incident handling and response, with knowledge of common probing and attack methods, viruses, botnets and other forms of malware. Correlating events from a Network, OS, Applications or IDS/Firewalls and analyzing them for possible threats.• Assist in the writing and review of organizational security policies to support internal control (access management, contingency planning & testing, Security Awareness, intrusion detection, Patch Management, Anti-Virus, etc.)

Indianapolis, Indiana, United States

• Implemented QRadar SIEM reporting (including PCI reporting) to inform and assist clients' incident response teams and security managers.• Analyze, investigate and respond to security events and incidents from IDS/IPS, SIEM, Firewall, Splunk, Log analysis, malware analysis and forensics tools (FireEye, Security Analytics and Wireshark).• Being part of Security Operations Center (SOC) Team involved in real-time monitoring of Security related logs, generating and reviewing reports and work on post-incident analysis tasks.• Execute security scans and generate reports for remediation requests. Provides support for general tasks in Tenable.IO as well as user account creation, disablement and maintenance.• Performing Vulnerability assessment using Qualys guard and Tenable.IO scanner• In depth experience with internal, external, network, & application vulnerability assessments utilizing Qualys Guard and FireEye with strong knowledge on Vulnerability Management using Qualys Guard and Nexpose.• Built the Security Orchestration, Automation and Response (SOAR) program centered on ServiceNow, Vulnerability Scanner, Carbon Black, Symantec, and Splunk.• Working experience using Nessus vulnerability Scanner, FireEye IDS, Microsoft Azure /Advanced Threat Protection (ATP), Log Analytics, Wireshark, Solarwinds and ServiceNow.• Established security baselines in accordance with NIST, FISMA, and industry best security practices.• Responsible for deploying and being in compliance for PCI -DSS standards and HIPPA compliance logs being captured within the SIEM• Institute and monitor management, operational, and technical controls that meet HIPAA, SOC2, and ISO standards.• Perform vulnerability scanning and assist with compliance auditing to ensure customer networks conform to all relevant compliance standards, including PCI-DSS, HIPAA and Sarbanes-Oxley

Milwaukee, Wisconsin, United States

• Manage Information Security architecture, design, installation, operational planning, and risk remediation activities on various systems spanning more than 15000 devices spanning 23 locations• Review, analyze, and correlate global, network/security incidents from multiple systems (i.e. QRadar, Tenable.IO, Web Inspect) to identify cyber threats and vulnerabilities.• Responsible to the set-up of security alerting tools and technologies (SIEM, IDS/IPS, anti- malware, etc.) as well as security orchestration and automation response (SOAR) and be able to translate indicators of compromise (IOCs) into actionable alerts with automated response.• Splunk review on applications & platform access incidents to differentiate Non-Compliance from false positives alerts.• Creating and tracking security investigations to resolution. Using a SIEM/ QRadar, Splunk, Tanium and Crowdstrike.• Perform Vulnerability assessment and policy compliance and PCI compliance using Qualys.• Configured advanced malware analysis tool to identify unknown malware, zero day threats and advanced persistent threats (APT).• Assist in discovery of cyber vulnerabilities, investigation of global cyber security incidents, and prepare Cyber Security Incident Report.• Monitor security alerts of potential hacker attacks detected by security systems such as: Intrusion Detection & Prevention Systems, MPS (FireEye), Antivirus(AV), Email Gateway, proxy, Firewall and SIEM. • Manage and monitor access to security scanning tools such as Tenable.io and Rapid7• Used various tools for routine investigations such as FireEye, QRadar, Tanium, Symantec Endpoint Protection (SEP), Splunk, and documented findings for investigations and incidents in Archer Reporting suite.• Utilized Tenable's Security Center to examine scan results based on Tenable's Nessus scans• Perform incident response activities such as host triage and retrieval, malware analysis, remote system analysis, and remediation efforts

Greer, South Carolina, United States

• Analyze and review data from SIEM – Qradar, SPLUNK for suspicious activity and trigger alerts to the concerned teams.• Leveraged Splunk to provide real time alerting of suspicious events; create rules, filters, channels, reports, etc. to enhance and facilitate detection and response to potentially malicious activities. Includes experience with Splunk Enterprise Security and firewall monitoring.• Track current conditions and anticipate future directions for detection-led technologies such as security information and event management (SIEM) and associated operational technologies such as security orchestration automation and response (SOAR).• Managed Cyber Security threats through prevention, detection, response, escalation and reporting in effort to protect Enterprise IT Assets through Computer Security Incident Response Team• Worked extensively on various SIEM (Tanium, Splunk), AV, IPS/ IDS and security tools.• Creating scans and activating the alerts for the schedule’s scans using vulnerability scanning tools like Tenable’s Nessus. • Developed approaches for industry-specific threat analyses, application-specific penetration tests and the generation of vulnerability reports.

San Francisco, California, United States

Hyderabad, Telangana, India

Hyderabad, Telangana, India

Master'S Degree, Computer And Information Systems Security/Information Assurance

Bachelors Of Technology, Electronics And Communication Engineering