Design, innovate, and build public cloud security architecture (AWS, Azure, and Google Cloud)• Cloud Security Posture Management: Implementing continuous and automated security processes for VM and compliance to secure cloud workloads, including cloud incident response, risk assessment and visualization, and cloud threat modeling• Cloud Data Security and Protection: Access control security, endpoint protection, real-time threat detection, secrets management, logging and monitoring, Zero Trust Security Model• Cloud-Native Application Protection: Highly scalable, resilient, hybrid, and secure cloud infrastructure with cloud WAF, DevSecOps integration, and container and microservices security• Implementing Security Frameworks: Emphasize automation for greater efficiency and scalability• Infrastructure as Code: Ensure IaC security and automated provisioning.• Cloudability: Manage cloud costs, optimization, and rightsizing.

• As a lead senior technical associate, I use my technical and analytic skills to design, architect and maintain secure-cloud PCI environment• Public cloud secure migration process consultant, identifying opportunities for improvement and then driving those improvements• Responsible for managing the ASV and cloud vulnerability scanning, remediation, and driving the firewall review process• Cloud security services implementation for CSPM, CASB and compliance requirements• Development of solutions that aligns with business and security requirements

• Worked as a senior technical consultant for SaaS based Cloud Security and scanning applications for over a dozen of product portfolio• In-depth understanding and technical consulting on Qualys Cloud Security applications such as Vulnerability Management (CVE, NVD, ISAP, CVSS, Bugtraq), Policy Compliance (CIS, NIST, COBIT, ISO 27001), Security Configuration Assessment and Questionnaire, Asset management, Public cloud scans, Cert & CloudView, PCI ASV, API security & 3rd party integrations, Splunk, Kibana, Elasticsearch• Reviewing and confirming vulnerability assessments as False Positives/False Negative of vulnerabilities for hybrid IT environments with Security Advisories of various OS and applications such as Microsoft, Linux, IBM, Oracle, Cisco, CheckPoint and VMware and comparing it with the Qualys Vulnerability Signature Database to perform Vulnerability Assessment of the detections in the Scans conducted• Analyze and fix Cloud compliance related issues (Public cloud security)• High-tech, investigative & pertinent approach to the pre-production, cloud, scheduled & ad-hoc vulnerability, compliance & web-app scanning and assessments, patch and remediation priority advisor as needed

Technical assistance for Premium & Platinum customers (Americas & APAC) on Security devices such as Next generation Firewalls, Email & Web appliance, Central Firewall managers:• ACLs, Firewall rules, Country blocking for flow including Network Translation with DNAT, SNAT• IPS and IDS Management-Port scanning, various flood detection• Internet Access Policies, Bandwidth and Surfing Quota Policies• Static Routes & various routing protocols, firewall concepts and database, DNS, DHCP• Webserver configuration, troubleshooting and WAF security policies implementation• User authentication through AD, LDAP, User-Agent, Clientless users, STAS, SATC, OTP• Wireless AP module, NTP, Certificate management in different format PEM, DER, PKCS12• SSL VPN, IPsec VPN including secured tunnels between multi-vendor products• Remote Access VPN Technologies like SSL, L2TP, PPTP and HTML5 SSL VPN (Bookmarks)• Email Protection with SMTP traffic including SPX Encryption, DLP, RBL’s SPAM check, SPF, DKIM• On device reporting & SYSLOG Server configuration for external reporting purpose• Analysis of issue by reading logs in firewall GUI & the backend using Linux commands• Analysis of the packets using Wireshark log, system events & relevant error/warn messages• Recreating the technical scenarios and testing of the reported issues in lab environment• Escalating cases further to Global Escalation team to get product team for defects, remain in constant co-ordination for escalated case resolution & bug tracking• Creating knowledge base articles for Sophos product configuration

Associate engineer, intern and trainee with the team of experts for implementation, maintenance and planned outages for Cisco ASA firewalls, routers and switches.