SIEM- Operationalized and managed external facing incident response process. Conducted incident response on security incidents. Identified malicious signatures and worked with network team to implement IPS and Firewall rule. Identified/isolated malicious network clients, worked with teams to clear infected devices. Fine-tuned SIEM solution for more effective incident detection. Vulnerability scanning- Conducted scanning and remediation on client assets. Achieved 92% compliance both internal and external for 8,800+ sites. Actively identified/remediated unauthorized devices through host discovery and known assets.FIM- Identified critical changes on files, registry and directories. Conducted fine tuning efforts against false positives. Monitored changes for abnormalities against normal benchmarks.Managed yearly 3rd party Penetration Testing. Analyzed findings and supported remediation. SAQ- Operationalized and Managed PCI SAQ external facing portal. Obtained 97% compliance for 8800+ locations.

Administrator Symantec DLP. Re-architect-ed CyberArk infrastructure and application to support SOX and PCI requirements. Administered CyberArk privilege access management application. CyberArk global initiative, implemented automatic and manual password management. Wrote SIEM queries/dashboards for CyberArk on Infrastructure and Application side. Collaborated with global teams to synchronize Nexpose efforts. Administered Nexpose on scanning, tagging, maintenance, backup, etc. Created Director and Managerial level reporting templates. Assisted scanning for project and Compliance needs. Assisted in Deployment of SIEM. Executed SOX testing, remediation, and evidence collection. Performed various General Computing Controls (GCC) testing on quarterly basis. Created SOX GCC testing templates. Assisted in PCI evidence collection and reviews.Collaborated with external consultants to develop application and infrastructure security SDLC processes. Conducted security assessments of applications and infrastructure projects.Administered MDM mobile device email platform as front end administrator. Created polices, standard operating procedures, test organization groups, and troubleshooting documents. Deployed native email support to android devices.Rack mounted Safenet Ingrian servers.