Jaskamal Singh Saimbi Email & Phone Number

Boston, Ma, Us

- Cloud Security posture at BCH: Used Palo Alto's Prisma to generate configuration changes for hardening AWS accounts - Used Pacbot to generate resource inventory - Worked with application owners to identify internet exposed sites and moving them behind Imperva(WAF). - Ec2 image management: Built an AWS Lambda based serverless App to copy the latest CIS hardened images from marketplace into our core security account. Subsequently, sharing it out to all accounts in BCH's AWS Org - IAM user management: Used AWS labs to build a Stacksets deployment that automatically finds IAM users and disables/deletes them on a schedule - Built file transfer endpoints using AWS transfer family - Worked with the Networking team to enable security features in Fortinets deployed in AWS - Feeding AWS logs to Splunk: Built a solution to transfer Cloudtrail and Guardduty logs to Splunk. - Developing Incident Response workflow for responding to Guardduty detections. - GSuit adoption and hardening: Worked to identify and recommend hardening controls for GSuit in a research environment. - M365 adoption and hardening: Used M365 best practices to generate a list of security controls for the Windows team to implement. Focus on Exchange and Onedrive. - Certificate Automation POC: Used Sectigo's network agent method to test automatic renewal and deployment of SSL certs.

Boston, Ma, Us

- Proxy refresh: Helped plan, design and move proxy function to Cisco WSA from BlueCoat. - Tested and Deployed a redundant set of 6 WSA devices to proxy outbound web traffic - Enabled WSA log integration with Splunk - Developed a memo for Help Desk to tackle proxy related requests - Splunk move to Cloud: Designed and executed a move to cloud plan for Splunk. - Refactored on-prem Splunk infrastructure to point to Splunk Cloud SAAS for storage - Moved intermediate server to BCH AWS while maintaining a minimal number of forwarders on-prem. - Trained newer members of the team on Splunk and Nexpose - Vulnerability Management refresh: Helped with evaluation and testing Tenable as a replacement for Nexpose - Helped revising IR workflows with introduction of Endgame EDR in the environment. - Learned to use Corelight telemetry in Splunk.

Boston, Ma, Us

- Streamlining and Automating IR: Helped develop IR workflow and python tooling to streamline Incident Response - Developed a SOAR POC using Phantom - Helped testing a POC for CounterTack ETP - Built Splunk Dashboards for Incident Response investigations. - Reviewed Network Architecture for new applications and approved their firewall rule requirements. - Supported project owners with debugging Proxy, WAF and Firewall issues during and after deployment. - Took on management of Hospital proxy(Bluecoat): Maintaining and debugging proxy related user issues. - Helped onboard BlueCoat Security Analytics as our new network forensics tool in lieu of RSA Netwitness - Continued maintaining Splunk infrastructure and helped other analysts with building splunk queries - Continued maintaining Vulnerability Management processes and vulnerability reporting - Deployed Team Collaboration Tools like Owncloud, mediaWiki, Git and Asana

Boston, Ma, Us

- Maintaining a Healthy DMZ: Developed and maintained custom Python scripts for detecting service and asset changes in the DMZ. Shared asset lists with corresponding teams.- Vulnerability management: Used Nexpose and custom python scripts to detect and report Critical Vulnerabilites to teams.- Developed and Maintained custom Honeypot Scripts for detecting scanning activity in all our Network Zones- Managing application lifecycle in Imperva(WAF)- Incident Response: Responded to Alerts coming in from our SOC tools (Fireeye, Firepower) - Helped in developing technical response to different kinds of alerts - Implemented ELK stack POC for log aggregation. Later replaced by Splunk - Architected Splunk infrastructure for log aggregation.- SSL Cert Management: Worked with teams to procure CSRs and issuing Certs with Geotrust- IAM tasks: Account onboarding/offboarding, Debugging lockouts- Static and Dynamic scans for developers with Veracode- Deployed Team Collaboration Tools like Owncloud, mediaWiki, Git and Asana

Boston, Ma, Us

- Gained extensive IT experience with open source technology- Worked with Pentaho’s ETL solution, Kettle and maintained ETL jobs- Maintained and Upgraded VMware’s VCenter and ESXi hosts- Setup monitoring and graphing solutions with Ganglia and Graphite- Exposure to rapid deployment and configuration management tools like Cobbler, Puppet and Control tier.- Installed and configured a NAS solution- Updated and monitored Cisco ASA 5505- Maintenance tasks for HP procurve and Netgear switches- Account onboarding and offboarding for LDAP, Exchange, Confluence, Jira and Jungle Disk user accounts

Responsible to manage the website and update ISSA-NEU's Facebook page with the event inventory.

- Helped with computer related troubleshooting.- Worked on a multimedia project.

- Used ASP.NET MVC3 to develop components of an electronic health record management system targeted at nursing homes- Identified, developed and documented a security implementation plan for the company- Designed and recommended a virtual network in the cloud for the upcoming production servers

Master'S Degree, Computer And Information Systems Security/Information Assurance

Bachelor'S Degree, Computer Science