E Hari Email & Phone Number

Denver, Colorado, United States

• Monitoring and analysis with 24x7x365 using various SIEMs and IDS / IPS tools• Use the integration between the external tools and the AWS environment to achieve the desired purpose of compliance and audit using native AWS security services for cloud safety operation.• Operation control and monitoring of IDS / IPS, security and cancellation point security and control, security, and control, vulnerability management, WAF, DDO, files, high protection of malware, security of e-mail safety, threats, safety, safety. Nana WEB bridge, SIEM management, and newspapers• AWS cloud operation is open 24 hours a day• Involved in safety products such as Palo Alto, Twist Lock, Azure Firewall, etc.• Development of cloud training models that automate the creation of VPCs and AWS resources related to applications• Execute a part of the security team and a VAPT evaluation and closed loop holes for AWS infrastructure• Develop AWS Security Roadmap, which contains the third party tool used for safety monitoring in AWS services and AWS cloud• Develop AWS Security Group Strategy, Judged Society Agreement, Approval Process for Change Security Group in the Promotion Promotional Environment• Confirm that the definition of SEPM's Windows virus is within 24 hours from those reported by Symantec.• MCAFEE EPO, McAfee in, McAfee EDLP, McAfee Editor's Note management, upgrade, troubleshooting experience• Modify Symantec plan analysis and fix quarantine results and risk data• Execute and maintain the best practices of SAST, DAST, IAST, and grater• Manage sprunkening files such as entries, accessories, conversions, and research• Upgrades of Splunk Company are around 6.2.3 and safety corrections• Develop, configure, and maintain Splunk transfer to various platforms• Make sure that the application website is in place and can be used by users

St Louis, Missouri, United States

•Implement and maintain NGA Amazon Cloud Service (AWS) security instances and deploy security infrastructure•Deploy Palo firewall, Panorama, Cisco FTD, FMC, and F5 on AWS east and west regions VDSS (Virtual Data Center Security Stack) with redundant availability zones•Advice and Recommendations to management for AWS security posture improvement•Enabled and configured cloud trail logs for all VPCs in all AWS accounts•Monitored cloud environments (AWS) for potential threats and vulnerabilities using the security tool, Red lock, to process logs and generate alerts based on rule criteria•Installed and managed detection servers and cloud detectors•Deliver the implementation, setup, and management of Symantec DLP•Provide a solutions-driven, customer-centric approach to clients' data-security challenges•Performed Single Tier Installation of Symantec DLP for test purpose•Also performed two tier and three tier installation•Performed activities including requirement analysis, design and implementations of various client server-based applications using Splunk 5.x, Splunk 6.x•Experience implementing an operational Splunk environment•Review, and recommend changes and improvements•Responsible for monitoring and, providing analysis in a 24x7x365 Security Operation Center (SOC) using various SIEM (Splunk), IDS/IPS software tools.•Worked with Symantec DLP version 14.6 and 15.0•Analyze network attacks, blocks, detects, and regular Health checkups in the environment• Scanned File servers, Distributed machines, documents and email repositories, web content, applications, and databases.•Worked with saved system reports, configured event thresholds and triggers, enabled Syslog server, log review, configured system alerts, and configured enforce server to send email alerts•Involved in firewall deployment and management in Azure such as Palo Alto, Azure Firewall

Dallas, Texas, United States

•Provided necessary designs and implemented security solutions for egress/ingress points using IDS/IPS sensors across the networks to provide better incident handling and event monitoring•Developed cyber security standards on NIST frameworks and ensured their proper implementation to reduce the risk of vulnerabilities to IT assets•Developed various functions including identifying, protecting, detecting, responding, and recovering for performing concurrent and continuous operation of dynamic security risk•Reported compliance and operational metrics for network security infrastructure•Worked with vendors, IT personnel, and various departments to deploy new or updated technologies•Conducted routine hardware and software audits of all supported systems to ensure compliance with established standards, policies, procedures, and other requirements•Periodic security assessment of firewall, routers, switches, VPNs, and other network components' security configurations•Provided support in investigating any actual and potential information security incidents•Experience with deployment of Symantec DLP- Endpoint Prevent, Network Prevent for Email, and Network Prevent for Web, Network Discover, and ITA•Installed and applied Qualys Guard appliances and ran various standard reports•Responsible for supporting customers with Symantec products including Ghost Solution Suite, Deployment Solution, and Symantec Endpoint Protection•Provided real-time intrusion detection host-based monitoring services using Symantec Endpoint•File Integrity Monitoring - Infrastructure Operations and Administration of Symantec Data Center Security Server•Deploying and Managing Symantec Endpoint Protection.

India

•Responsible for tracking insider threat alerts involving PHI/PII information•Performed risk analysis and led remediation efforts for threats and vulnerabilities in response to industry news and vulnerability assessment tool results•Responsible for information security: Vulnerability management, scanning, and remediation of all networked systems•Tested and created the mobile hardening policy for all cellular devices; Company-owned and BYOD•Researched and documented briefings on threat reports and assessments•Created the Security Operations Center runbook, a concise procedural guide to handling common security events•Assisted in the research of new security toolsets to include: next-generation firewalls, Endpoint protection, Security Automation, and threat intelligence collection/collaboration tools•Designed and initiated Insider threat monitoring policies and procedures for databases containing PHI/PII•Assisted with Social media exercises including the coding and development of security applications•Assisted the Special Investigations Unit (SIU) with internal employee fraud and misconduct investigations•Conducted forensic investigations for both employee fraud and malware analysis•Proactively protected PHI/PII through use of Data Loss Prevention (DLP)•Monitored for access and exfiltration of sensitive data•Built active content and logic in SIEM for existing and emerging monitored applications•Assisted with Symantec DLP Operational alerts, policies, monitoring, investigations and creating Reporting•Delivered onboarding and security training to new employees•Delivered weekly and monthly Security Metrics for the CEO and IT Stakeholders

India

•Provided computer security incident response support to the Confidential Bureau of Confidential•Collaborated with the Computer Technology Officer (CTO) to maintain and operate HBSS, which includes generating custom reports, host system monitoring, configuration, and maintenance•Established and maintained safeguards against unauthorized access, destruction, and loss or alteration of data•Researched and documented briefings on threat reports and assessments•Established network software parameters used for insider threat analysis; e.g., ArcSight security authorization tables, configuration definitions, and file access tables•Assist staff in defending assets from unauthorized and malicious activity & provide knowledge/expertise in personnel transfers•Monitored and evaluated system's compliance with IT security requirements in accordance with Intelligence Community Directives (ICDs) 502/503, Committee on National Security Systems Instruction (CNSSI) 1253, and National Institute of Science and Technology (NIST)•Configured and monitored Intrusion Detection Systems (IDS): read, interpret and analyze network traffic and related log files•Correlated data from multiple sources (IDS, IPS, HIDS, HIPS, ArcSight Logger & ESM, HBSS, DMZ logs), data acquired through computer forensics & situational awareness data sources, vulnerability repositories, cyber threat reports & prioritizes events for incident handling•Created network diagrams based on site topologies for use in identifying security flaws•Implemented policy and procedural controls covering physical security, application and data security, system software security, contingency planning, and compliance with personnel clearance procedures.