CEH certified and having knowledge on phishing mail attack, DDoS attack, SQL injection attack, Brute force attack, Cross-site scripting (XSS),Kali Linux, Nmap scan, TCP DUMP, FW Monitor and Wireshark.SIEM: IBM Qradar/ QROC (QRadar on Cloud)• Administration and Investigation.• Event monitoring, Incident investigation and response.• Real-time monitoring and analyzing network traffic for unusual /suspicious activity.Netskope (CASB, DLP, Proxy, Zero Trust)• Cloud Access Security Broker (CASB) , Zero Trust network .• DLP, Inline policies.• Reverse and forward proxy configurations.• Threat protection, EDR integrations.EDR (Crowdstrike)• Deployment and administration.• Investigation of security incidents.• Configuring work flows, network containment policies.• USB DLP policies, RTR, Crowdstrike overwatch, IOC management.Threat intelligence, Sandbox: Anomali Threat streamBIA/ BCP/DR• Performing Business Impact Analysis (BIA) to identify the risk, process, application dependencies, staffing requirements. • Create Business Continuity Plan (BCP), and Disaster Recovery plan (DR) based on the outcome of BIA. VAPT/ Vulnerability Management: Tenable/Nessus/Qradar• Performing VA Scans using IBM Qradar And Tenable cloud (tenable.io).• Risk and vulnerability assessments• Participating in periodic audits, internal and external penetration testing. Analyzing the reports and mitigating the security risks.Audit, Gap Analysis: HIPAA , SOC• Gap assessment of information security policies. • Perform internal audit of security controls , HIPAA compliance. Identify the violations, missing controls, and implement.Incident/ Change Management: ServiceNow, Manage Engine, JIRA• Incident investigation, documentation, remediation. Service request through Manage Engine Service Desk and JIRA.Patching & Compliance: Bigfix• Patching and various compliance checks. System lifecycle management.

Firewall: Juniper SRX, Foritgate, Azure Firewall • Deployment, rules migrations, administration. Security policies, Routing, NATs, IPSEC VPNs, Content/URL filtering, proxy configuration. Hot Fixes, patches, Application firewall configuration.• Implementing IDS/IPS using Juniper SRX and Fortigate.WAF: Signal Sciences• Deployment of signal sciences cloud agent based WAF, creating rules to protect against Zero day, OWASP top 10 vulnerabilities.VPN: Pulse Connect Secure, Azure • Deploying and administrating Pulse Connect Secure SSL host to site VPN solution for remote office/WFH. • Configured security posture check , location awareness policies and resource access control policies.Switching and Routing: Juniper EX 3400, Aruba IAP 205/207 APs• VLANs, Inter VLAN routing, and static routing, ACLs, QOS. SSIDs, Security Posture Check.• Prepare network security design and documentation (HLD/LLD) for project work.• Perform best practice analysis/audit of network security devices.Incident Management:• Using TCP DUMP, FW Monitor and Wireshark to capture network traffic for troubleshooting of security incidents. • Handling incidents, service request through Manage Engine Service Desk and JIRA.Cloud Security:• Planning network and security infrastructure on Microsoft Azure. • Monitoring security logs on Azure Security Center, investigating incidents, and remedying.• Manage IPSec VPN tunnels between on-premise to Azure could infrastructure and between customer sites.SIEM: IBM Qradar• Experience in adding asset profiles in the IBM Qradar tool. • Managing and troubleshooting of cloud based VM log sources on IBM Qradar. • Real-time monitoring and analyzing system logs on Qradar SIEM and network traffic for unusual or suspicious activity interpret such activities and make recommendations for resolutions. Endpoint Security: McAfee ePO, Crowdstrike• Responsible for endpoint security including McAfee ePO AV Server, Crowdstrike.

Firewall: Endian Open Source • Firewall security policies, Routing, NATs, Content/URL filtering, proxy configuration. Hot Fixes, patches, OS upgrade.Windows Server Administration: • Configuring, administrating AD, DHCP server on windows server 2008 and Server 2012 R2. • Patch management. backup solution for data retention and archival plans using windows backup solutions.• Planning for migration of infrastructure from Legacy to new platform by working with developers. (Windows OS upgradation).Cloud: Microsoft Azure• On-Prem to Cloud Migration. Planning network and security infrastructure.• Monitoring security logs on Azure Security Center, investigating incidents, and remedying. • Configuring Vnets, Azure firewall, managing Network Security Groups in Microsoft Azure Cloud. • IPSEC VPNs, DR plans, Site Replication Services, Private Endpoints, PaaS Database administration, site recovery services.• Server and client VM deployment. Web server setup/IIS configuration.• Hosting web application for the customers on Microsoft Azure along with Azure load balancer, hosting web servers on on-prem environment (intranet).• Monitor the web apps and hybrid applications using application insights. Manage and Involving in Azure Micro Services, Azure Function.• Azure Disk Encryption and Azure Bus and key vault. Azure Traffic manager DNS.Virtualization: • Installation and administration of VMware ESXi 6.5, deploying VMs, creating test, dev and production environment. Configuring replication services using Vcenter console.Database Servers: • Installing and configuring MS SQL, MySQL database servers. • Configuring DB backup schedule/Maintenance plan, and replication services.BCP/DR: • Planning and implementing BCP, DR for on-prem and Azure infrastructure.VOIP, PBX: • Configuring and managing various VOIP solutions (FreePBX, Elastics, Asterisk, 3CX).Patch/lifecycle Management: • Bigfix and Microsoft WSUS services

• Firewall: Configuring and managing of firewall (Shorewall, Endian open source). • Security Tools: Configuration and management of various security tools including Symentec, McAfee Antivirus, WinProxy.• Disk Encryption: Encrypting disks using BitLocker, configuration of deep freeze software to deny changes to critical OS files.• Network, VOIP, PBX: infrastructure maintenance LAN, unmanaged switches, ISP routers (Cisco). Firewall NATs , Setup wireless network using Linksys and Dlink routers. Remote access using windows dial-up VPN L2TP, PPTP. Configuring and managing various VOIP solutions (NEC, Panasonic, Elastics, FreePBX, 3CX windows, asterisk).• Windows Server Administration: Configuring, administrating AD, DHCP server on windows server 2003 and server 2008 R2. Patch management. backup solution for data retention and archival plans using windows backup solutions.• Database Servers: Installing and configuring MS SQL, MySQL database servers. Configuring DB backup schedule/Maintenance plan, and replication services.• HA Clustering Services: Configuring failover clustering using windows server 2008 R2 using HP ProLiant servers.• IT Service Management: POC, procurement of various IT products. Monitored ticket system for any incident ticket, responded, and worked on resolving the ticket within SLA metrics. Managing billing and invoice process by arranging payments to vendors. Working with company’s retail outlets across India by installing desktop computers. Working with logistics to replace defective desktops/workstations.• Deployment Tool: Configuring and managing of WDS for larger deployment.• Printers: Configuring and maintain network printers (Epson Dot matrix, HP, Xerox Laser)• Exchange Server: Configuring exchange server 2003 and MS outlook application.• OS Cloning Tools: Norton GHOST implementation, Clonezilla.

Installing servers (mainly HP ProLiant series) at customer site.• Configuring RAID 0, RAID 1, RAID 5 for hardware failure redundancy.• Configuring ILO network port for managing RAID and server hardware over LAN.• Assembling and troubleshooting of Desktop PCs and servers.• Installing, configuring and administrating server operating systems (windows server 2003, server 2008 R2) and client operating systems (windows 98, windows vista, and windows 7) at customer site.• Configuring failover cluster nodes of windows servers.• Troubleshooting hardware issues at customer site.• Installing and troubleshooting network infra using L2 switches (Dlink and Cisco unmanaged).• Configuring wireless routers (Dlink and Linksys).• Configuring internet to desktop PCs at remote locations using VSAT satellite-based internet services.• Visiting customer sites for periodic IT maintenance activities and replacing legacy, EOL IT peripherals.• Cloning drives using CloneZilla images.