Karanveer Singh Email and Phone Number

- Kubernetes and Container security.- Container runtime baselining and enforcement.- Implemented compliance and Vuln checks on Images using third party solutions .- CI/CD integration and deployment.- Accelerated TSR and Threat Modeling.- Security Logs and event integration/dashboarding with the SIEM's.

- Designed encryption policies on Safenet KeySecure, Vormetric DSM, and Microfocus Voltage to helped teams within Visa and onboarded their applications with Data at Rest Encryption [ DARE] Solution effectively. - Working as a SME for DARE solution and Leveraged SIEM solutions like SPLUNK to troubleshoot application-related issues in a timely manner.- Collaborated with SQL and NoSQL Database teams to help them Enable the external Key management for SoD. - Scripted monitoring tools to monitor the High Availability of managed solutions.- Proactively identify compliance gaps and risk areas in advance of audits and work to fix the issue and improve processes and procedures.- Build dashboard on SPLUNK for the team to quickly triage the issues and also setup multiple alerts for known ERROR keywords.- Meticulously planned and successfully implemented tier zero activities by following the change management process.

- Worked with business to identity HBI, MBI Data and encrypted them with Vormetric DSM.- Migrated From legacy Vormetric DSM setup from physical to Virtual.- Designed policy on Venafi TPP for Business units to keep them secure and comply with standards.- Enable the automation for Certificates deployment, Policy enforcement, and Workflow.- Wrote the Detailed Certificate request manual for Non-Technical Business units.

- Maintained computer lab functionality: applied several key fixes to system errors; identified and installed new security Patches.- Used Protocol Analyzer tools like Wireshark for filtering HTTP traffic, Vulnerability Scanners (Nessus) for finding CVE, and Port Scanner (Nmap/Zenmap) for determining the type of services running in theoperating System.- Effectively used the above-collected information to demonstrate how to get into the target system.

- Evaluated data to identify high-risk targets and developing process and procedures to protect and secure Data at rest.- Configure, implement, and maintain Cloudlink SecureVM for Boot and Data drive encryption solutionsand Key Management.- Worked with internal and external groups to identify data ownership.

- Assisted I.T team in internal audits for website and OS vulnerability.- Enhance System and Network Security by configuring Firewalls and IDS/IPS.- Provided customer service while handling questions/problems/complaints in a courteous, efficient, and professional manner via email, face-to-face, or telephone.