Dheeraj Tolaney Email & Phone Number

Dubai, United Arab Emirates

Dubai, United Arab Emiratesu

Dubai, United Arab Emirates

• Review of Implementation and integration of the solution in the infrastructure• Review Content development of Rules, Reports and Dashboards• Prepare and implement SOPs, Run Books provide L1/L2/L3 support and meet KPIs / SLAs• Building and training team for 24/7 operations• Managing end to end delivery of the solution• Manage a team – Onsite and Offshore• Contact with the customer as focal point for all high priority & major incidents reported• Provide first line supervision to direct reports• Develop and administer SOC processes and review their application to ensure that SOC’s controls, policies, and procedures are operating effectively• Provide management oversight for the identification, triage and response of events or incidents of apparent security breaches• Produce and review aggregated performance metrics• Manage and increase the effectiveness and efficiency of the SOC, through improvements to each function as well as coordination and communication between support and business functions• Play a significant role in long-term SOC strategy and planning, including initiatives geared toward operational excellence• End User Training, Process document preparation and sign-off

Dubai

Project: SOC Enhancement for a banking client of NII:Role: - Information Security Consultant• Gap Analysis on the basis of People, Process and Technology• Creating co-relation rules with the IOC’s• Creation of missing Security Operation ProceduresProject: DLP Implementation, GSOC operations and Vulnerability ManagementRole: - Information Security ConsultantProviding information security consulting services to British outsourcing company who has its major contracts with Government, transport and facility management. Responsible to take major decisions and implementations on the info sec upfront.Job Responsibilities:• Product installation, configuration and troubleshooting for DLP• Preparing test scripts and extensive testing for DLP• Presentation of the product to the stake holders• End User Training, Process document preparation, project closure and acceptance• Implementation of log forwarder and integration of all event sources• Incident Response to the MSSP for GSOC Incidents• Vulnerability Scanner Implementation• Evaluation of security technologies and solutions ( PAM, AWL)• Auditee for external ISO27001 surveillance audits

Dubai, United Arab Emirates

SOC Administrator for a nationalized bank in Dubai in a Global security operation center established using SIEM “RSA Security Analytics”. Managing the administration of Security Analytics for logs and packet capture having 2500+ event sources with an EPS of 30,000SIEM Engineering Task:• Integration of infrastructure event sources with SIEM• Health check• Troubleshooting of log collection issues from existing devices and resolve within timelines to be compliant with log management policies SOC Operational Activities:• Level 2 investigation of alerts and incident response• Define and develop new correlation rules to improve quality of security alerts in SOC• Creating custom security dashboard and reports as per the requirements• Reporting the security posture of the organization• Training the SOC operators

Mumbai Area, India

Global security operation centre established using SIEM “RSA enVision” and RSA Security Analytics. Logs are being collected across the globe and correlated by envision/analytics to monitor internal and external threats. Also multiple compliance reports are being shared with each region to project current state of security. Vulnerability assessment is also part of SOC operations where Nessus is used to keep track of compliance status across the globe.Log Management:• Integration of all event sources with RSA Security Analytics• Performing analysis of Alerts and escalate to stake owners for further investigation• Integrate new devices with envision and keep track of log collection issues from existing devices and resolve within timelines to be compliant with log management policies• Prepare and publish Periodic reports (weekly, monthly) for all regions.• Define and develop new correlation rules to improve quality of security alerts in SOCIncident Management:• Adhere to incident management process defined for Security Operation Center• Based on the alert analysis raise Proposed security incidents and assign to respective Teams using Incident management tools BMC Remedy, SYSAid• Keeping track of all open incident tickets and escalate long pending tickets to security officers• Conduct weekly Incident Management Calls with all regions security officers to discuss open security issuesVulnerability Management:• Defined and publish monthly scan schedule for all regions• Initiate approval process and change requests to perform monthly scans• Review the scan results and verify whether all devices are scanned successfully• Escalate the issues with failed scans to Nessus support and security officers if there is any internal issue like credentials, connectivity• Initiate exception approvals for false positives vulnerabilities• Verify all scanners are updated with latest plugins sets• Initiate quarterly network scan to identify live hosts in network

Master’S Degree, Information Technology

Information Technology

Bachelor’S Degree, Information Technology