- Design, architect, and implementation of data pipelines utilizing messaging queues like Kafka and Elasticsearch datastore (that hold application logs, security logs, Call Detail Records, PII data and metrics)- Collect, aggregate, and visualize the collected metrics, logs and CDRs to provide actionable insight- Selecting appropriate CI/CD (Continuous integration / Continuous delivery) tools and incorporate them into deployments, Add testing and validation steps to validate configuration.- Automate deployments to build out the infrastructure on Cloud, Jobs to deploy specific applications on hosts, Build Docker images for our applications, Kubernetes to host these applications- Evaluate and define security mechanisms, configuring Role based access control and authentication for customers to query the datastore(Elasticsearch) and secure PII data for unauthorized access.- Distributed tracing, logging, and metric visualization using various Observability tools and frameworks (e.g. Elastic Stack, Grafana, Prometheus, etc.) across a shared service platform- Build an overall monitoring and alerting strategy to notify on security and infrastructure incidents and involve in defining monitoring requirements and implement automated incident resolution solutions.- Work closely with operations and software engineering teams to design and implement scalable and high performance solutions for our platform as a service and internal management tools. - Drive automation of application deployment for production and pre-release environments. - Installation and configuration of Production Clusters, Indexing Data, Queries, Aggregations, Mappings Clusters, handling PII, data segregation between environments, Administration and Automation

* Design and implement ELK (ElasticSearch, Logstash and Kibana) stacksolutions* Create and manage Elasticsearch Clusters on premise.* Fine tune bulk load process.* Provide Elastic Search tuning/optimizing based on application needs.

*2.5 Years of SIEM experience in Implementation, Review, Fine tuning for the clients.*Log monitoring in security operations center for devices such as Firewalls, IDS, IPS, Database, UNIX and Windows Servers.*Configuring log collection to RSA SA/QRadar from various types of event sources.*Log correlation and real time threat management using RSA SA, QRadar Console.*Review and analysis of Daily, Weekly & Monthly reports. Investigate on anomalies reported, eliminate false positives and provide a detailed view to the client with the impact & recommended actions.*Investigate potential or actual security violations or incidents in an effort to identify issues and areas that require new security measures or policy changes.*Conduct routine performance optimization and rule base/config cleanup.*Advise the client about new security vulnerabilities, attack vectors and the mitigation methods.*Conduct periodic review calls to track the SLA and the Contract commitment.*Performing application vulnerability assessments to provide a comprehensive view of the clients` application weaknesses that are exposed to threats.*Identify vulnerabilities, recommend corrective measures and ensure the adequacy of existing information security controls.*Generate and present reports on security vulnerabilities to the Clients.