Tarun B Email & Phone Number

Grand Ronde, Oregon, Us

Created threat and alert policies using Microsoft Entra Admin Center and managed MFA functionalities using Azure Active Directory, which strengthened security protocols.Performed vulnerability assessments and patching (on-demand and scheduled), updating Red Hat Linux 7/8, DMZ and Windows servers (2019/2022) to sites created in Rapid7 Insight VM and Automox for tracking patch management compliance.Conducted Dynamic and Static Application Security Testing (SAST and DAST) for 50+ applications. Configured, scanned, and validated vulnerabilities using Nessus and Burp Suite, increasing work efficiency by 50%.Performed manual penetration testing of applications and APIs to identify OWASP Top 10, SANS 25, CEW Top 25, OSSTMM, and other well-known security standards, improving application securityDeveloped five playbooks as part of the incident response plan following NIST framework as part of Security Policy Development.Implemented digital forensics tools for the security team, including Wireshark and Volatility, to enhance analysis and investigation capabilities following MITRE ATT&CK, ensuring proper Chain of Custody

Dublin 2, Ie

Generated vulnerability reports, executive summaries, and mitigation plans using Rapid7 Nexpose and Qualys.Utilized the NIST Risk Management Framework (RMF) to assess and mitigate risks across IT systems, enhancing overall security posture and compliance.Conducted risk and vulnerability assessments on systems and applications via Rapid7 Nexpose.Conducted audits and assessments to ensure compliance with ISO27001 standards, integrating ISO27002 best practices into security threat policies and procedures.Monitored Endpoint Security, Control Vulnerability Management, and performed network assessments using NMAP and Wireshark.Developed SIEM reports and dashboards for data correlation and fusion from various input logs using Splunk and IBM Q-Radar.Resolved incidents and threats related to vulnerabilities in WebEx and FedRAMP GRC environments usingautomated scripts in Python, PowerShell, and Bash.

Teaneck, New Jersey, Us

Performed vulnerability assessments using Nessus, Qualys, and Rapid7 Nexpose to ensure the security of IT infrastructure and systems.Designed, tested, and implemented security infrastructure including centralized logging, IDS, and HIDS, utilizing Tanium for endpoint management.Analyzed network traffic using Wireshark and TCP dump to monitor for security incidents.Investigated and correlated events at Security Operations Center (SOC) using SIEM, integrating data from Firewalls, IPS/IDS, Symantec Proxy SG, and Proofpoint.Conducted manual penetration testing of applications and APIs to identify OWASP Top 10, SANS 25vulnerabilities, using Metasploit, NMAP, and Burp Suite Pro.Performed VAPT of Web Applications using Metasploit and Burp Suite Pro to identify security flaws and threat exposure at Security Operations Center (SOC).Created test plan documents, security checklists, and reviewed testing documents to ensure comprehensive coverage for SOC team.Performed manual and automated static code analysis using IBM AppScan to identify vulnerabilities.Worked closely with development teams to ensure adherence to the OWASP secure coding practices.Conducted risk and vulnerability assessments on systems and applications via Rapid7 Nexpose.