S C. Email & Phone Number

Purchase, Ny, Us

• Working with software development teams to define alternatives and recommend optimal solutions to meet security and regulatory requirements in the design of new and enhanced systems• Assisting in the deployment of security aspects of the SDLC (e.g., threat modeling, application security testing)• Building Secure DevOps architecture patterns and provide guidance on how to develop secure applications and infrastructures• Managing internal projects on threat issues that support a variety of participants and stakeholders measuring the effectiveness and comprehensiveness of MasterCard first line defenses.• Design secure multi-domain Internet facing applications• Implementing PKI, Digital Certificates, SSL, Hashing, Encryption techniques and practices• Providing technical design and architecture advice to internal teams on how to securely develop and build applications and supporting systems (including databases/data warehouse)• Building & deploying security infrastructure and automate security operations• Develop high-quality technical content such as automation tools, reference architectures, and white papers to help our consultants, partners, and customers build on the work you deliver.• Targeting the high level, high impact related threats to product with the aim of enhancing the effectiveness of managing operational risks• Challenging criteria, tools and methodologies used for threat intelligence and threat landscape analysis. • Performing vulns risk review by assessing the different layers of vulns of the designated system/environment to determine risk in order to prioritize remediation• Consolidate apps and infrastructure vulns into one risk focused view to help provide guidance senior management risk and remediation decisions.• Define secure mechanisms for critical business functions in cloud environments• Working on improvements for security services, including the continuous enhancement of existing methodology material and supporting assets

Coral Gables, Fl, Us

Cyber Security Instructor of 3 modules: - Vulnerability Management- Cloud Security- Ethical Hacking

Madrid, Es

• Applying multiple technical specifications to trusted computing (Global Platform) and telecommunications (GSMA);• Documenting all work performed and maintaining that documentation;• Identify threats, risk and technology issues associated with development approaches and implement mobile device security, risk mitigation strategies;• Cryptographic system design and implementation;• Trusted computing development, Java Card and eSIM development;• Managing a multiple technology teams, including task planning and managing code reviewconducting meetings, agendas, ensuring meeting minutes distributed;• Analyze the impact of operational decisions on all upward reporting & metrics;• Interface with manage multiple vendors and their diverse specifications;• Advise senior management concerning issues and their impact to the corporation’s business strategy;• Manage project towards delivery of business results & prepare organization for effective post-deployment support and measurement of benefits;• Actively contribute to the operations group by providing leadership in the use of technology to further achieve efficiencies;• Continuously monitor the system or information environment for security-relevant events and configuration changes that negatively affect security posture;• Ensure that security controls and requirements are properly allocated and documented in design specifications, technical publications and manuals, etc;• Develop the program plan and critical milestones;• Identifies and assembles the appropriate blend of resources to meet program needs and requirements; monitors and reports on activities related to the project;• Meets with customers and Program Executive to review program scope/progress and resolve program issues;• Controls project requirements, scope, and change management issues;• Managing a staff that consists of all aspects of Cyber security to include 24*7 Security Operations, Security Engineering, Vulnerability Management;

Stamford, Connecticut, Us

• Primary responsibility includes maintaining and Securing the LAN & WAN setup.• Evaluate user needs and system functionality, and help develop IT security strategies associated with security monitoring, detection, and incident response.• Analyze cyber security events, including threat model development and resulting security risk analysis of systems• Ensured security logs and audit trails are reviewed in accordance with established schedules and procedure.• Responsible for any network changes in Confidential devices.• Implementing the new projects & client’s connectivity.• Assisting & troubleshooting day-to-day connectivity related issues• Implementing & Troubleshooting IPSEC VPN Tunnels .• Configuring pools and Virtual servers in F5 based on client requirement.• Configuring and Maintaining of ASA Firewall includes creating of Network objects and ACL Rules.• Maintaining and configuring the Vonage Devices.• Implementing ProofPoint Advanced email security solutions for email threats and continuity.• Performing Vulnerability and Penetration testing on Network Devices using Nessus.• Troubleshooting Day-Day Networking issues.• IOS Upgradation on Cisco Devices.• Install and configuring the Network Devices such as Switches, Routers and Firewalls.• Creating the VLANS for the new Departments.• Implemented a Disaster Recovery Plan to ensure data backup and recovery.• Performing Side-by-side upgradation on SQL Server instances.• Configuring Replications on SQL Server.• Participate in the Information Security Incident Response process.• Conduct advanced computer and network forensic investigations relating to various forms of malware, computer intrusion, data breaches, etc.• Participate in threat hunting activities to proactively search for threats in the enterprise environment.• Provide analysis of network packet captures, DNS, Proxy, Net flow, malware, host-based security and application logs, as well as logs from various types of security sensors.

• Defining project scope, definitions and deliverables that support business goals in collaboration with senior management and stakeholders.• Developed and implemented policies, processes and procedures for managing IT related projects• Overseen the development, design, implementation of new applications and changes to existing computer systems and software packages for the customers• Coaching, mentoring, motivating and supervising project team members and contractors, and influencing them to take positive action and accountability for their assigned work• Managed all risks, issues, and actions logs• Managed and tracked all projects deliverables and milestones and prepare dashboard reports• Managed all projects schedules and reverse plans as at when needed• Identified standards or requirements for infrastructure configuration or change management;• Ensures appropriate product-related training and documentation are developed and made available to customers.• Determined appropriate products or services with clients or customers to define project scope, requirements, and deliverables. Also, develops, modifies, and provides input to project plans• Implements project plans to meet objectives and coordinates and integrates project activities• Managed, lead, and administered project resources and Monitored project activities and resources to mitigate risk. Also implemented or maintained quality assurance processes• Made improvements, solved problems, took corrective action when problems arose• Proactively managing changes in project scope, identify potential crises, and devise contingency plans.• Identified project documentation requirements and procedures. Developed and implemented product release plan• Collected information regarding complex situations and considered various perspectives and provided valuable and appropriate recommendations to Management

London, Gb

• Managed various IT security projects to ensure project were in scope, budget, and time. Managed staff members on various cyber security projects.• Conducted data exfiltration/leakage assessment (Advanced Persistent Threat /APT).• Performed malware analysis using various tools (e.g. Encase, HBGary FireEye, NetWitness, IDA Pro). Conducted analysis on captured user, computer, and network security events, in a near-real time environment, to determine security vulnerabilities, policy violations, and malicious behavior.• Identified user behavior that may be indicative of potential malicious or counter intelligence related activity.• Performed IT auditing services (C & A) for various government agencies using NIST, NERC CIP, SCADA & DoD (DIACAP) guidelines.• Implemented risk management framework for organizations, and developed affective strategy for continuous monitoring. Developed secure guideline for cloud computing, worked on projects integrating IT governance controls in cloud computing.• Performed penetration testing & vulnerability assessment for compliancy assessment.• Developed IT security policies, guidelines, baselines, and procedure for various organizations (government, banking, commercial, and more) to reflect their respected IT governance adherence.• Assist in the writing and review of organizational security policies to support internal control (access management, contingency planning & testing, Security Awareness, intrusion detection, Patch Management, Anti-Virus, etc.)

Nyon, Ch

• As security engineer; facilitates the development of efficacy measures of cyber security programs to convey the overall security posture and maturity of the program; identify and vet new or emerging technologies necessary to assure success and security of services and products. They will fulfill the strategic security plan and deliver technical objectives of across multiple security roadmaps.• Hands on Experience on Vulnerability and Penetration testing using Different Tools.• Identify information system vulnerabilities through automatic and manual means.• Prioritize vulnerabilities based on the risk to information systems and data.• Follow up on remediation activities to ensure identified risk are mitigated.• Assist in preparation of metrics and reporting for vulnerability management activities.• Assist with the development of security awareness communications.• Assists with the execution of phishing email exercises.• Benchmarks with IS risk management practices of other companies.• Assist with the development of cyber security policies, standards, and procedures.• Knowledge on Identity and Access Management solutions(IAM) such as single Sign-on.• Assist with the annual review of cyber security policies and provide input for improvements.• Assist with responses to cyber security incidents such as malware detections and malicious activities.• Respond to security escalations received from the Security Operations Center (SOC).• Research security incidents, document findings, and provide remediation activities.• Utilize in-house security tools when researching security incidents (IPS, Antivirus Management Console, etc.)• Manage the cyber security queue in the IT ticketing system.• Participate in a rotating on-call schedule to respond to afterhours incidents.

Englewood, Co, Us

• Lead engineering security solutions for datacenter firewalls, application firewalls, database security, endpoint security, and network/system forensics technology. • Troubleshoot and resolve security service issues within the network and endpoint security environment• Respond to automated monitors and alerts to troubleshoot network issues • Design, deploy and support routing, switching, firewalling, and load balancing• Identify process risks, weaknesses and controls, and develop recommendations and plans to address vulnerabilities.

Chesterfield, Missouri, Us

• Performs application, web, mobile and network penetration tests using both automated and manual techniques• Identifies and exploits vulnerabilities in commercial, open source, custom software applications and infrastructure across one of the world’s largest networks• Supports Security Operations Center processes and procedures