•Implemented and managed the end-to-end Vulnerability management process and deployed the tool on IT infrastructure and Cloud environment.•Performed Vulnerability Assessment and Penetration Testing on both Internal and External Network/infra devices.•Performed the Configuration review for servers, Dockers and network devices based on CIS Benchmark.•Conducted regular reviews of firewall Rules, access controls, and network segmentation based on industry best practices.•Coordinate with respective stakeholders Provide regular reports on patch management effectiveness, including metrics on patch compliance and vulnerability reduction.•Utilized OSINT techniques to reconnaissance and identify potential weaknesses in the organization's external and internal infrastructure.•Implemented and managed endpoint protection platforms (EPP) and endpoint detection and response (EDR) solutions to enhance threat detection and response capabilities.•Monitored and analyzed endpoint security alerts, investigating and responding to potential security incidents and doing the escalation on end users who violate the data and coordinating with the end-user managers and taking the appropriate valid business justifications.•Developed and implemented endpoint security policies and procedures to enhance the overall security posture.•Coordinate with the SOC team to create the SIEM usecase based on company policy/requirements and implement in Splunk.•Conducted security assessments using AWS Security Hub, analyzing findings and recommending remediation strategies based on CIS AWS Foundations Benchmark.•Developed and implemented vendor audit programs, incorporating industry standards and best practices.•Utilized standardized frameworks (e.g., ISO 27001, PCI, CIS) to evaluate vendor security postures.•Hands on Experience in multiple security tool(DLP, EDR, proxy, SIEM, VA etc.)

• Performed Vulnerability Assessment and Penetration Testing both automated and manual.• Experience in Internal and External Penetration Testing on Network Infrastructure (including Servers, • firewalls, Routers, switches, etc.)• Good knowledge in Vulnerability management involving identifying, classifying, remediating and mitigating vulnerability of Server/Network. • Performed activities like PCI VA scans and authenticated VA scans as per the client's requirements.• Perform vulnerability assessment on the web applications to identify the issues and prioritize them based on risk level.• Responsible for taking calls with clients and helping them to mitigate their vulnerabilities. • Preparation, review and delivery of Daily, Weekly and Monthly reports to the clients.• Executed a client assignment for ecommerce, Finance and Banking sectors with different regions like ME, USA and India. • Hands-on Experience in multiple security tools like Nessus, Nmap, Burpsuite Pro, WPSCAN, TESTSSL, SQLMAP & OPEN SOURCE TOOLS.