Chaitu A Email & Phone Number

Purchase, Ny, Us

 Implement Checkmarx (code analysis tool for web apps) for Static application security testing.  Reviewed source code (Java/J2EE/Spring/FTL/JavaScript) and developed security filters within Checkmarx for critical applications. Implemented Secure Software Development Life Cycle (S-SDLC) processes; developed secure coding practices for web, mobile applications, including database and middleware systems. Conducted weekly meetings with developers to remediate security issues. Supporting in preparation of plans to review software components through source code review or application security review  Automated Checkmarx with Bamboo (CI/CD) to run scans on a daily basis. Implemented Application Security program (DAST and SAST) at the enterprise level to identify, report and remediate security vulnerabilities from applications deployed in DEV, PRE-PROD and  Source code using IBM AppScan Source, triage and resolve the security vulnerabilities. Performed PCI pre-assessment audit for the entire network as well as the related applications in preparation for the annual external PCI compliance audit Providing fixes & filtering false findings for the vulnerabilities reported in the scan reports.  Supporting in preparation of plans to review software components through source code review or application security review  Prepare and assemble work papers for assigned audits in accordance with departmental standards and update the SOX repository in a timely manner Provide timely status reports to the project manager on progress of activities Used Burp suite to manual penetration testing for internal sites

Jersey City, Nj, Us

 Implemented AMP throughout the organization 10000+ endpoints, integrated with firepower to identify, control , contain and remediate malwares , or zero day attacks Implemented strategic patch management policy to reduce threats against the infrastructure and reduce vulnerability. Participated in monthly and quarterly audit process with the help of tools like Qualys, Nipper, Nessus.  Help drive ethical hacking for internal infrastructure and external facing interface Migrated and reduced firewall rules from older generation firewalls to NGFW firepower and or Palo Alto firewalls. Implemented ISE and SG tags in tandem with Active directory to further enhance authentication and authorization throughout the organization , including wireless controllers ( Aruba). Developed security policies and baselines for mobile and web applications. Performed compliance audits to ensure security policies and baselines have been adequately implemented. Experience working with the Cisco IPS module which allows IDS or IPS inspection of all traffic passing through the firewall Worked with Internet Engineering team in the design and configuration of BlueCoat Internet proxy. Implemented WebFilter database for URL content Filtering. Designed and Implemented perimeter security in tandem with network team to implement multitier network, isolated with firewalls at perimeter and within datacenter . Implemented further isolation for PCI-DSS environment. Performed PCI pre-assessment audit for the entire network as well as the related applications in preparation for the annual external PCI compliance audit.  Documented security findings, recommendations and presented to the business users, executive committee and Compliance departments Implemented IBM AppScan standard, source editions, HP WebInspect and Qualys Guard web application scanners. In addition, the security tools Metasploit and Burp Suite were utilized for manual penetration testing

Singapore, Sg

 Performed the review of a newly implemented Security Incident and Event Management (SIEM) system. Reviewed technical specifications for SIEM, logging and proposed recommendations to improve the overall deployment of the solution. Used SourceFire/ FirePower management console to monitor, validate and remediate attacks/ incidents. Deployed and monitored Cisco AMP for malware protection. Conduct periodic network, system, application, and physical security audits  Maintain a set of policy documents, security standards, and process and procedure documents for the Technologies Division  Responsible for monitoring and, providing analysis in a 24x7x365 Security Operation Center (SOC) using various SIEM(Splunk), IDS/IPS software tools.  Responsible for Data loss prevention (DLP) and service interruptions.  Exposure to wild fire advance malware detection using IPS feature of Palo Alto.  Monitor critical infrastructure including firewalls, IDS/IPS devices, virtual networks, vulnerability scanners, VPNs, WANs, and disaster recovery sites  Managed and maintained various network security systems including firewalls, IDS systems, central authentication systems, application proxies, and general support systems  Engineering, configuring and deploying Enterprise SIEM/SEM solutions.  Manage Splunk (SIEM) configuration files like inputs, props, transforms, and lookups. Upgrading the Splunk Enterprise and security patching.

Plano, Tx, Us