As a Research Engineer at C3iHub, under IIT Kanpur I am responsible for conducting research on various International and National cybersecurity frameworks, standards, best practices, guidelines and models like NIST CSF, SCF, ISO 27001, CAF, SAMA, C2M2, CMMC, etc., and to develop a Cyber Security Capability Maturity Model for Indian Critical Sector Entities to assess and improve their cybersecurity maturity.

Working as IT Security Consultant at Directorate of Information Technology, Electronics and Communication (DITEC) and also designated as Chief Information Security Officer (CISO) of Information Technology Department, Government of Assam for Cyber Crisis Management Plan (CCMP). From September, 2018 to June, 2023. Responsibilities included - 1. Providing consultancy on Information Security Governance, Risk Management and Compliance for Government of Assam to ensure implementation of Cyber Security Policy, IT Act 2000, ISMS as per ISO 27001:2013 standard, cyber crisis management and Security Protocols of various agencies of Govt. of India. 2. Monitoring security of websites and portals of all Departments and organizations under Government of Assam, State Data Centre, Assam State Wide Area Network and other critical ICT infrastructure of State Government. 3. Drafting and implementation of Cyber Security Policy, Cyber Security Crisis Management Plan and ISMS for Government of Assam. 4. Coordination with CERT-In, Govt of India for monitoring infected or vulnerable services of State Data Centre and mitigation of issues on day to day basis. 5. Coordination with NCIIPC, Govt of India for vulnerability management and risk mitigation of all websites and portals of Govt of Assam. 6. Monitoring and Evaluation of SOPD-G scheme for Establishment of Electronics Manufacturing Cluster (EMC) at Tech City, Bongora funded by MeitY, Govt. of India and Govt. of Assam and SOPD-G scheme for Land acquisition for establishment of IT Park funded by Govt. of Assam. 7. Providing consultancy to other Departments of Government of Assam in regards to Technical Evaluation of RFP and other Technical Documents. 8. Monitoring the authorization for registration of domain names under assam.gov.in. 9. Development and maintenance of the DITEC website.

Job responsibilities involved -1) Creation and maintenance of Online Database of Bioinformatics and Biotechnological Resource of North-East India (Sponsored by Dept. of Biotechnology, Govt. Of India). URL – www.babrone.edu.in 2) Redesigning and maintenance of websites – www.vetbifg.ac.in and www.mpgt-salmonella.res.in 3) Assistant Editor of e-journal of biological science named BioNE. (ISSN: 2456-7264) URL – www.babrone.edu.in/blog4) Managing Linux and Windows Web Server and DNS Server.5) Maintenance and troubleshooting of computers in college campus. 6) Maintaining UTM system (WatchGuard XTM 5 Series) and ensuring secured LAN in the college campus.

Job involved –1) Delivering training and workshop on IT Security and Ethical Hacking.2) Practical demonstration of LAN and Website vulnerability finding techniques and countermeasure using OS and tools like Backtrack, Metasploit, Wireshark, Acunetix Web Vulnerability Scanner etc.3) Implementing Virtual Operating System, Firewall, Antivirus, AntiRootkit, AntiSpyware, IDS, IPS to demonstrate security mechanism.