Client Tech Operations, Sr Engineer
Current• Being part of the Client Tech Ops Team, the primary job is to assist the clients who got affected by the Ransomware incidents globally. Right from the initial discussions, gathering details about the environment and restoring back to normal to resume operations, rebuilding the environment, collecting artifacts for forensic evidence, and finally hardening the environment to meet security best practices. • Analyzing the environment during initial triage and prepare the restoration plan ie., Creating New DC’s, Seizing FSMO roles, Building new VCSA/ESXi, Hyper-V Servers, validating the backups and restoring critical data (if possible), Pushing S1 (EDR) through GPO/Centralized tool, Cracking and changing Administrator/root passwords if they are compromised and changed by the Threat actor, Troubleshooting any underlying issues, Decrypting the environment, Implementing Hardening GPO’s, Enforcing security changes across the Env, Implementing MFA for more security, Writing Scripts as per the need and use them to fetch the details• Recommending best security measures to protect the Environment, closing the vulnerabilities by applying relevant patches and workarounds