Experienced IT Security Professional | Cyber Security | Risk Management | Penetration Testing | Cloud SecurityWith 8 years of proven experience in the field, I am an accomplished IT Security Professional specializing in Cyber Security, Risk Management, Penetration Testing, and Cloud Security. I possess a deep understanding of industry security standards and best practices, ensuring the protection of critical data and infrastructure.My expertise lies in implementing robust security measures, conducting thorough risk assessments, and performing penetration testing to identify vulnerabilities and enhance system defenses. I am adept at utilizing advanced tools and technologies, such as SIEM, to monitor and detect potential threats, enabling timely response and mitigation.Additionally, I have hands-on experience in cloud security strategy and the successful migration of enterprises to hybrid or fully-cloud enabled environments. I excel in developing comprehensive approaches for threat analysis, application-specific penetration tests, and generating detailed vulnerability reports.My proficiency extends to identity and access management solutions, multi-factor authentication, and ensuring compliance with regulations such as FISMA, HIPAA, ISO 27001/27002, and OWASP. I have a strong grasp of risk management principles and computer forensic tools, enabling me to effectively manage network changes and troubleshoot issues.Furthermore, I have a solid understanding of disaster recovery planning, intrusion detection systems (IDS), intrusion protection systems (IPS), and web application firewalls (WAF). I am well-versed in configuring and deploying security modules and products, including McAfee, to safeguard organizational assets.As a dedicated professional, I am committed to staying updated with the latest industry trends and regulations. I possess excellent knowledge of compliance frameworks and standards, including NIST, COBIT, and OWASP.In addition to my technical skills, I am adept at utilizing collaboration tools such as Confluence and Jira for efficient project management. I have demonstrated expertise in conducting email threat analysis and implementing mobile device management (MDM) solutions using MS Intune.If you are seeking an IT Security Professional who can effectively safeguard your organization's data, mitigate risks, and ensure compliance, I invite you to connect with me. Let's work together to enhance your security posture and protect your valuable assets.
-
Sr Cyber Security EngineerSpirit Mountain Casino Jan 2024 - Aug 2024Grand Ronde, Oregon, UsCreated threat and alert policies using Microsoft Entra Admin Center and managed MFA functionalities using Azure Active Directory, which strengthened security protocols.Performed vulnerability assessments and patching (on-demand and scheduled), updating Red Hat Linux 7/8, DMZ and Windows servers (2019/2022) to sites created in Rapid7 Insight VM and Automox for tracking patch management compliance.Conducted Dynamic and Static Application Security Testing (SAST and DAST) for 50+ applications. Configured, scanned, and validated vulnerabilities using Nessus and Burp Suite, increasing work efficiency by 50%.Performed manual penetration testing of applications and APIs to identify OWASP Top 10, SANS 25, CEW Top 25, OSSTMM, and other well-known security standards, improving application securityDeveloped five playbooks as part of the incident response plan following NIST framework as part of Security Policy Development.Implemented digital forensics tools for the security team, including Wireshark and Volatility, to enhance analysis and investigation capabilities following MITRE ATT&CK, ensuring proper Chain of Custody -
Student InternNew York State - Its Sector Jun 2023 - Dec 2023 -
Security AnalystAccenture Mar 2022 - Jul 2022Dublin 2, IeGenerated vulnerability reports, executive summaries, and mitigation plans using Rapid7 Nexpose and Qualys.Utilized the NIST Risk Management Framework (RMF) to assess and mitigate risks across IT systems, enhancing overall security posture and compliance.Conducted risk and vulnerability assessments on systems and applications via Rapid7 Nexpose.Conducted audits and assessments to ensure compliance with ISO27001 standards, integrating ISO27002 best practices into security threat policies and procedures.Monitored Endpoint Security, Control Vulnerability Management, and performed network assessments using NMAP and Wireshark.Developed SIEM reports and dashboards for data correlation and fusion from various input logs using Splunk and IBM Q-Radar.Resolved incidents and threats related to vulnerabilities in WebEx and FedRAMP GRC environments usingautomated scripts in Python, PowerShell, and Bash. -
Sr Security Operations AnalystCognizant Mar 2017 - Mar 2022Teaneck, New Jersey, UsPerformed vulnerability assessments using Nessus, Qualys, and Rapid7 Nexpose to ensure the security of IT infrastructure and systems.Designed, tested, and implemented security infrastructure including centralized logging, IDS, and HIDS, utilizing Tanium for endpoint management.Analyzed network traffic using Wireshark and TCP dump to monitor for security incidents.Investigated and correlated events at Security Operations Center (SOC) using SIEM, integrating data from Firewalls, IPS/IDS, Symantec Proxy SG, and Proofpoint.Conducted manual penetration testing of applications and APIs to identify OWASP Top 10, SANS 25vulnerabilities, using Metasploit, NMAP, and Burp Suite Pro.Performed VAPT of Web Applications using Metasploit and Burp Suite Pro to identify security flaws and threat exposure at Security Operations Center (SOC).Created test plan documents, security checklists, and reviewed testing documents to ensure comprehensive coverage for SOC team.Performed manual and automated static code analysis using IBM AppScan to identify vulnerabilities.Worked closely with development teams to ensure adherence to the OWASP secure coding practices.Conducted risk and vulnerability assessments on systems and applications via Rapid7 Nexpose.
Tarun B Education Details
-
Sathyabama Institute Of Science & Technology, ChennaiElectrical And Electronics Engineering
Frequently Asked Questions about Tarun B
What is Tarun B's role at the current company?
Tarun B's current role is CompTIA Security+ | Certified in Cybersecurity (ISC)2 | Masters in Digital Forensic and Cybersecurity.
What schools did Tarun B attend?
Tarun B attended Sathyabama Institute Of Science & Technology, Chennai.
Free Chrome Extension
Find emails, phones & company data instantly
Aero Online
Your AI prospecting assistant
Select data to include:
0 records × $0.02 per record
Download 750 million emails and 100 million phone numbers
Access emails and phone numbers of over 750 million business users. Instantly download verified profiles using 20+ filters, including location, job title, company, function, and industry.
Start your free trial