Bhargav Kumar Email & Phone Number

United States

Reading, Pennsylvania, United States

1. Threat Monitoring & Incident Response: Conducted real-time analysis and response for security events sourced from SIEM, DLP, IDS/IPS, firewalls, and antivirus logs. Enhanced incident detection accuracy by tuning SIEM alerts and managing threat intelligence feeds for zero-day vulnerabilities.2. Risk & Compliance: Developed risk assessment frameworks for NIST, PCI, HIPAA, and SOX compliance, ensuring adherence to regulatory standards. Partnered with external auditors for SOX and FISMA audits and implemented ISO-based controls for cloud security events.3. Penetration Testing & Vulnerability Management: Led vulnerability assessments and penetration tests, configuring Qualys for in-depth vulnerability analysis and automated reporting. Managed remediation efforts with Qualys and developed detection playbooks for emerging attack vectors.4. Encryption & Key Management: Provided strategic direction on PKI and KMS integration, overseeing encryption audits and securing data through advanced endpoint protection with tools like Carbon Black and ThreatLocker.5. Forensics & Incident Investigation: Led forensic investigations for incident response, preparing legal-grade reports while maintaining a strong chain of custody. Mentored junior analysts in digital forensics and managed threat-hunting efforts for proactive defense.6. Network Security & Monitoring: Managed secure configurations for firewalls, VPNs, and web proxy solutions, including Zscaler, to protect network traffic and prevent unauthorized access. Monitored system performance with tools like Nagios and SolarWinds to preemptively address potential disruptions.7. Security Frameworks & Automation: Developed automated monitoring protocols and scripts for Splunk to enhance data analysis and incident alerting. Configured secure environments with Splunk and implemented IDS/IPS configurations for better incident handling.

Aguadilla, Puerto Rico

In this role, I contributed to securing and enhancing critical IT infrastructure by configuring, implementing, and maintaining cybersecurity solutions across various platforms, including Forcepoint, O365 Security, McAfee IPS, ArcSight SIEM, and Zscaler.Core Responsibilities and Accomplishments:1. Cybersecurity Standards and Risk Management: Developed and implemented security standards based on NIST frameworks to safeguard IT assets and reduce vulnerabilities. Managed access control configurations, enforcing least privilege and secure password practices across systems.2. SIEM and Threat Detection: Monitored security events with tools like ArcSight and Solarwinds SIEM, creating alerts for attack patterns (e.g., brute force, data exfiltration) and actively hunted for threats using tools such as Carbon Black.3. Vulnerability Management: Configured and managed Qualys for vulnerability scanning, setting up automated scans and reporting to streamline remediation processes. Supported remote users and tracked vulnerabilities for quick response.4. Encryption and Data Security: Deployed encryption solutions to secure financial data, implemented multifactor authentication (MFA) for clients, and enforced policies to meet PCI DSS standards.5. Forensics and Incident Response: Led threat analysis, examined digital evidence, and collaborated with legal teams to provide expert testimony when needed.6. Zscaler and Network Management: Configured Zscaler to enhance connectivity and security for over 20,000 users, providing analytics to improve performance and protect applications.7. Active Directory and Identity Management: Oversaw Active Directory, access management, and Single Sign-On (SSO) solutions, ensuring secure user access and seamless operations.8. Training and Consulting: Delivered training on secure access practices and worked closely with Global Security Council, contributing insights on cyber intelligence and privacy.

New York, United States

1. Strengthening Business Continuity and Risk Management: I conducted hands-on interruption tests to ensure that business operations could withstand disruptions, while also assisting the Transition Risk Management team with critical regulatory reviews (RAD).2. Coordinating Vulnerability Assessments and Compliance Efforts: Working closely with stakeholders like ISSOs and SOC teams, I led vulnerability assessments and maintained security logs to identify issues, address vulnerabilities, and prepare incident reports.3. Supporting PCI DSS Compliance for Clients: By guiding clients through every stage of PCI compliance—from initial gap analysis to certification—I ensured that security and regulatory standards were met and vulnerabilities addressed efficiently.4. Building and Managing Security Infrastructure: I played a key role in setting up and overseeing security tools such as Splunk, Qualys, and LogRhythm. This helped us monitor and respond quickly to threats across systems, including endpoint management solutions like Tanium and Symantec.5. Conducting Policy Compliance Audits and Risk Analysis: Using frameworks like NIST, COBIT, and SOX, I led regular audits to ensure compliance, managed Segregation of Duties (SOD) processes, and documented changes to ensure clarity and accountability.6. Leading Incident Response and Continuous Monitoring Efforts: I developed and maintained our Incident Response and Audit Program, addressing any findings and preparing regular updates for management. I was also deeply involved in tracking security projects, updating scorecards, and presenting results to stakeholders.6. Executing Access Reviews and Project Coordination: I managed quarterly account provisioning and role change audits to ensure proper access controls. I also tracked project progress in detail, providing transparent updates to our leadership and team members.

Pune, Maharashtra, India

In my role as a Security Engineer, I was responsible for implementing and monitoring cybersecurity measures, focusing on threat detection, vulnerability assessment, and maintaining security protocols across enterprise environments. Key contributions include:1. Configured and executed Qualys scans for vulnerability detection and remediation, establishing baseline policies and monitoring traffic logs using Accelops SIEM to provide comprehensive threat visibility.2. Conducted security risk assessments for new applications and IT systems, ensuring compliance with established security baselines and minimizing residual risk.3. Investigated and triaged threats from SIEM and IDS/IPS feeds, performing in-depth analysis to determine incident nature and implementing immediate response strategies.4. Supported manual penetration testing on sensitive systems, utilizing tools like NMAP, Nessus, and Qualys for network reconnaissance and threat identification.5. Addressed compatibility issues arising from Qualys scans, coordinating with vendors for resolution and maintaining seamless integration with other security systems.6. Created security awareness programs, enhancing organizational security understanding, and trained teams on incident response protocols.7. Developed and documented standard operating procedures (SOPs) for recurring security issues, and participated in system categorization meetings to define controls based on system information types.This role strengthened my expertise in vulnerability management, incident response, and proactive risk assessment while fostering my collaboration skills through cross-functional teamwork and vendor coordination.