Karan S. Email & Phone Number

Austin, Tx, Us

Incident response:• Spearhead Incident Response Team (IRT) through several high-severity and persistent threats, expediting containment and expanding threat hunting.• Create ad-hoc remote response scripts in bash/Python/PowerShell and strategize rapid remote enterprise-wide deployment.• Research threats and indicators of compromise to fine-tune prevention and detection rules.• Reverse engineer malware, carve memory artifacts, and deconstruct attack techniques. • Create and… Show more Incident response:• Spearhead Incident Response Team (IRT) through several high-severity and persistent threats, expediting containment and expanding threat hunting.• Create ad-hoc remote response scripts in bash/Python/PowerShell and strategize rapid remote enterprise-wide deployment.• Research threats and indicators of compromise to fine-tune prevention and detection rules.• Reverse engineer malware, carve memory artifacts, and deconstruct attack techniques. • Create and maintain Incident Response Plan – increasing depth and comprehensiveness as the team and automation matures.• Join the efficacy of Incident Management System with SOAR automation for one, comprehensive repository of incidents and anomalies. • Manage SOC vendor for 24x7 coverage and leverage the shared intelligence to enhance detection.Orchestration and Automation:• Integrate SIEM, EDR, proxy, firewall, and other various detection/prevention tools in SOAR.• Translate SCC Incident Response Plan to SOAR automations and manual interventions.• Track IOCs and attack techniques to produce wholistic view of SCC threat landscape to feed into data to enhance detection/prevention.• Use APIs and scripts when log forwarding to SIEM is not possible. • Create threshold and ML anomaly detections on SIEM as a trigger for SOAR playbooks.• Work with APIs of various vendors to extract more speed and details from tools.Vulnerability Management and Assessments:• Restructured County’s response to zero-day, critical vulnerabilities to mimic active incidents.• Lead application/web app/API scanning and assessments for secure coding practice and proper utilization of authentication.• Deep dive in app architecture to avoid foundational insecurities and unsafe coding practices.• Continuous assessments of SCC Hospitals and Registrar of Voters infrastructure.• Simulate attacks on SCC network to assess SOC vendor capabilities.• Facilitate third-party penetration testing and cyber defense assessments. Show less

Moffett Field - Mountain View

Incident Response and Digital Forensics:• Handle incidents from initial detection to root cause.• Conduct remote and live incident response using custom scripts.• Perform volatile memory and file system analysis for APTs and bespoke threats.• Forensic investigations for various requesters: HR, Office of Inspector General, Department of Justice – Counterintelligence Division• Maintain chain of custody of digital evidence handled by the team.Engineering and… Show more Incident Response and Digital Forensics:• Handle incidents from initial detection to root cause.• Conduct remote and live incident response using custom scripts.• Perform volatile memory and file system analysis for APTs and bespoke threats.• Forensic investigations for various requesters: HR, Office of Inspector General, Department of Justice – Counterintelligence Division• Maintain chain of custody of digital evidence handled by the team.Engineering and Autmation:• Design and implement a database application to correlate asset owners and system vulnerabilities; the platform evolved into a tool to track remediation SLAs as well.• Create a mini log-aggregator exclusively for Ames local network data.• Automate non-intrusive fingerprinting for asset inventory of SCADA and sensitive equipment.• Architect an evidence retention system to enhance availability and redundancy.Vulnerability Management and Assessments:• Laid the foundation to modernize NASA Vulnerability Management Program using automation to create actionable reports and encourage sysadmin autonomy for speedy remediations.• Coordinate with various center-wide departments to strategize remediation and raise awareness.• Lead external pen-testing program for NASA Ames and all its mission sensitive programs. Show less

• Perform live incident response, analyze data gathered, and summarize the incident• Lay the foundation to the Vulnerability Management Program for NASA Ames Center• Develop scripts in Python and VBScript to simplify gathering and organizing vulnerability data• Create systems for data retention of forensic evidence• Write Center-wide newsletter articles for outreach to system administrators and end-users• Whitepaper on various subjects including:o S/MIME capabilities of… Show more • Perform live incident response, analyze data gathered, and summarize the incident• Lay the foundation to the Vulnerability Management Program for NASA Ames Center• Develop scripts in Python and VBScript to simplify gathering and organizing vulnerability data• Create systems for data retention of forensic evidence• Write Center-wide newsletter articles for outreach to system administrators and end-users• Whitepaper on various subjects including:o S/MIME capabilities of iOS and Android (Encryption)o Security of IoT devices using Zigbee and non-standard protocolso Open-source phishing and other offensive security tools Show less

Richmond

General technology and security support, sales reports, and marketing.

Cupertino

Facilitate group tutoring, engage meaningful discussions, and reinforce subject materialDesign group activities for different learning methods