Deepa A. Email & Phone Number

United States

• Collaborates with users to discuss computer data access needs, to identify security threats and violations, and to identify and recommend needed programming or process changes.• Monitor security systems and networks for potential security breaches or incidents.• Assist in investigating and responding to security alerts, incidents, and vulnerabilities identified by security tools and other sources.• Assist in researching and analyzing emerging threats and trends to develop proactive security measures.• Assist in conducting vulnerability assessments and penetration tests on systems, applications, and networks.• Identify vulnerabilities and weaknesses in the organization's infrastructure and provide recommendations for remediation.• Provide support for security operations, including user access management, log analysis, and security incident documentation. Assist in maintaining security policies, procedures, and standards.• Assist in the deployment, configuration, and maintenance of security tools and technologies, such as firewalls, intrusion detection/prevention systems, antivirus software, and security information and event management (SIEM) solutions.• Provide technical leadership and guidance to business units and team members, potentially on a 24×7×365 basis. • Involve handling events such as identifying user security issues, responding to real-time cyber-attacks against critical infrastructure, extensive troubleshooting, and coordinating resolution or restore using various applications and testing tools. • Assist in hardware/software failures and security breaches, threats, or network connectivity issues.• Regularly provide high-level proactive technical guidance, including security configurations, security policy modification recommendations, and diagnostics of remote network security issues.

• Maintained systems and performed system audits to protect data from unauthorized users; and identify, report, and resolve security violations.• Build procedural documentation (e.g., process flows, data flow maps, SOP's) or other work instructions to support the cybersecurity, risk program (e.g., Wiki, Knowledge Base Articles).• Participated and lead internal and external audit efforts such as PCI, and ISO-2700.• Diagnose, resolve, and document security incidents and audits in a timely and accurate fashion and provide end user training and support where required.• Run daily reports on security violations and internet usage within the organization, identify threats, and notify the Executive team, appropriate manager(s), and employees as needed.• Examine and evaluate information systems and existing configurations recommending controls to ensure system reliability and data integrity.• Specific responsibilities handled but not limited to Checkpoint Firewall, security systems, routers, switches, remote support, domain controllers, databases, exchange email servers and other LAN/WAN enterprises.• Designed and implemented new security-focused tools and services across the corporate environment.• Continuously assess endpoint security control coverage, escalating gaps to appropriate teams for corrective action where required.• Created and managed security metric dashboards for use within the team and provided management reporting.• Lead event analysis for network and system alerts in addition to anomalous platform activity, supporting internal and customer facing teams with accurate and timely log review and follow up.• Coordinated ongoing web application scanning and PCI compliance requirements.• Participated Red / Blue Team and CSIRT exercises, involving stakeholders across the business.• Regularly audit public IP space and DNS records including cloud hosting resources.• Managed cyber reputation tools to ensure findings are reviewed and resolved efficiently

Allentown, Pennsylvania, United States

• Monitored and proactively search for indicators of comprise within the environment. Investigate findings in accordance with incident response plan.• Supported technical implementation efforts in support of security projects while demonstrating the ability to solve technical challenges.• Worked closely with departmental peers to ensure the security of the organization’s systems and data.• Provided subject matter expertise and guidance to management. Provided cybersecurity leadership in the design and architecture of cybersecurity solutions.• Maintained current knowledge of applicable regulatory and compliance issues related to information security.• Provided engineering guidance for all IT projects, including establishing baselines for emerging and newly opted cybersecurity technologies, evaluation of the enterprise architecture, hardware, software, and technical controls.• Worked closely with the IT Operations, Engineering and Architecture staff to ensure systems meet the business objectives while upholding existing standards and best security practices.• Identified and understood issues, problems, and opportunities, developed, and evaluated alternatives and solutions, and provided a course of action.• Provided senior level subject matter expertise on various cyber threats, solutions, and architectures.• Implemented security measures to protect systems, networks, and data.• Stayed up to date on cybersecurity intelligence, including tools, techniques, and hacker methodologies.• Prevented data and/or intellectual property loss and service interruptions by understanding and using technologies and processes that will effectively protect the network.• Responded to computer security incidents and assist with incident response plans. Performed risk assessments and testing of data processing systems.• Installing, updating, and configuring security infrastructure and other security measures. Recommended security enhancements and purchases.

Bengaluru, Karnataka, India

• Provided consultation, guidance, and requirements to development, systems, network, and infrastructure teams, aligning with enterprise risk and security strategy and policies.• Identified and addressed risks and deficiencies. Coordinate internal and external security testing.• Prepared and presented remediation reports and recommendations to mitigate data protection and information security risks for system owners and business units.• Developed and upkeep of data protection and information security policies. Stayed apprised on current threats and attack vectors.• Coordinated internal and external security and compliance audits.• Generated and maintained comprehensive technical documentation, including runbooks, environment and application diagrams, data flow maps, and security documentation.• Conducted Data Protection reviews and implemented Data Protection and Data Governance solutions throughout the data lifecycle.• Supported application security risk or compliance remediation efforts and communication.• Fostered partnerships to facilitate participation in corrective action plans for identified issues.• Contributed to the continued development and scalability of the security awareness program.• Monitored and analyzed security events and incidents to identify potential threats and vulnerabilities.• Conducted regular vulnerability assessments and penetration testing to identify and mitigate security risks.• Worked independently to scope vulnerable bodies of technologies, identify weaknesses, severity, and impact, and recommend paths to remediation.• Developed and implemented security policies, procedures, and standards to ensure the confidentiality, integrity, and availability of information assets.• Collaborated with cross-functional teams to design and implement security controls for new systems and applications.• Investigated security breaches and incidents and provided recommendations for remediation.

Kuwait City, Al Asimah, Kuwait

• Monitored and analyzed security alerts and events from various security tools and systems.• Investigated and assessed potential security incidents to determine their severity and impact.• Performed root cause analysis of security incidents to identify vulnerabilities and recommend remediation actions.• Documented security incidents and findings in a clear and concise manner.• Escalated critical security incidents to the appropriate personnel.• Assisted with the development and maintenance of security playbooks and procedures.• Stay up to date on the latest security threats and vulnerabilities.• Analyzed and proposed enhancements to security systems on an ongoing basis.• Identified potential threats and reported software issues promptly.• Researched security vulnerabilities and formulated strategic mitigations.• Find and implement cost-effective cybersecurity solutions.• Established security best practices and standards for the company, covering internal processes and product offerings.• Conducted thorough testing on organization software for internal use and client-facing products.• Supported colleagues by addressing cybersecurity, software, or IT issues.• Created and maintained security controls documentation to meet different audit requirements.• Gathered and provided evidence of security control operations for monitoring and auditing purposes.• Documented software and network architectures, including security controls.• Captured application requirements for integrating with provisioning system.• Reduced information security risks to an acceptable level using industry best practices, policies, and procedures.• Provided support on Identity Access Management and Governance for commercial off-the-shelf software packages, organization designed applications, as well as systems.

Bengaluru, Karnataka, India

• Managed the IT department to plan, organize, control, and evaluate IT data operations. • Led the identification, implementation, and staff training for an ERP solution, streamlining business processes and enhancing operational efficiency.• Implemented strategic solutions upon identifying the issues in the existing operations. Ensured the security of data, network access and backup in coordination with the networking team. • Created use cases, use case specifications, and UML diagrams such as activity and sequence diagrams using Lucid chart.• Improved operational efficiency by automating repetitive and time-consuming HR operations using advanced skills in Microsoft Excel.• Coordinated system upgrades and conversions, ensuring data integrity and business continuity.

Bengaluru, Karnataka, India

• Utilized TAD methodologies to analyze the project's requirements, identify test scenarios, design test cases and plans, execute test scripts, and report defects through all phases of the Software Development Life Cycle (SDLC).• Managed the entire QA life cycle, from design and development through execution.• Implemented test automation using Selenium and Java and was recognized with the best contributor award for identifying 90% of defects using the automation suite.• Installed and configured Remote Access, VPN and file sharing. Performed VPN access event monitoring.• Training new joiners and juniors about the project and tools used.

Bachelor'S Degree

Education record