Avtar Gill Email and Phone Number

Conduct Internet and intranet remote hacker simulation on IBM’s infrastructure including cloud environments using red team or white team approach. Perform data gathering, recon, analyzes the network topology and prepare the Plan of Attack to minimize the impact on target systems during testing. Execute vulnerability scanning, web application testing, proof of concept penetration testing, privilege escalation, propagation and IT security compliance. Identify and document IT security issues, assign the risk level and provide road map to fix them in a timely manner. Present the report to the management along with proof of the compromise. In addition, perform on site security assessment of the IBM’s acquisitions globally, which include infrastructure architecture review, security policy and procedures review, interviewing IT team, run ethical hacking and web application testing. Identify the IT Security gaps and provide guidance for the smooth transition to IBM.

Responsible for the IT Security and compliance monitoring of various business units under National IT Security Program. Perform on site Threat and Risk Assessments (TRA), including vulnerability scanning, ethical hacking, privilege escalation, propagation and technical reviews of the IT security controls on operating system, middleware and network infrastructure for IBM and customers. Reviewed Disaster Recovery (DR) plans and DR test results. Interview the administrative and IT management team to identify the weakness in the IT Security management processes. Documented description, concern and recommendation for each identified issue and priorities them based on the fixed priority. Present the final report to the IT team and executive management. Monitor the identified security issues to closure. Managed ethical hacking lab, developed various tools to support the TRA process using C, Java, Perl, SQL and various shell scripts. Additional responsibilities included collaboration with IBM’s Global IT Security Team on the development and maintenance of IT Security Standards.

Responsible for the management and IT Security of Operating System and Middleware including AIX, Linux, Windows, Oracle, DB2, PostgreSQL Designed and implemented automation to monitor the health of various applications, Operating Systems and Middleware. Designed and implemented mission critical, high availability systems with very high SLA. Participated in various major incidence reviews and disaster recovery exercises. Interface with IT Security Audit team and remediated security issues within specified time frame.

Managed Databases (Oracle, DB2, Ingres) and Operating Systems (AIX, HP Unix, Linux and Windows). Implemented IT Security controls for Operating system and Middleware. Backup and restore of Operating System and Database. Wrote SQL scripts to load and unload data from databases. Implemented interface programs using embedded SQL, C and C++ for data transfer between various systems. Created various automated script to monitor systems.