10+ years of proven Risk and Security professional with vast experience in delivering quality results in a fast-paced, time-sensitive environment. Experienced and skilled in enhancing, operating and maintaining Information Security, Risk Management and Cyber programs.Professional SummaryExperienced Professional as an IT Security Professional in IT Infrastructure, Vulnerability, Risk security, SOC Analyst, SIEM, Information Security, and Cyber Security.Completed an individual project where I provided a detailed analysis of a malicious packet capture using tools like Wireshark, Snort, Nessus and Netwitness InvestigatorKnowledge of Computer Networking Basics, SOC Components, OSI model, TCP/IP protocols, Data Backup basics, Information Threats and Attacks.Worked on McAfee VSE product for Stop worms, spyware, and viruses, get high-performance security, Lessen damage from outbreaks.Knowledge of common cyber security technology tools such as firewalls, IPS/IDS, DLP, CASB, Network access control, DDOS Mitigation, Anti-Malware, Anti-Virus, encryption, and two factor authenticationManaging Security tools DLP, SIEM, Vulnerability scanner and Penetrations test.Conducts vulnerability scans and penetration tests to meet PCI requirements.Perform penetration testing for internal network and follow-up end to end with security vendor for the web application PT and make sure that vulnerabilities are addressedExperience in Penetration testing - Expertise in detecting various vulnerabilities (including OWASP top 10) comprised over authentication, authorization, input validation, session management, server configuration, cryptography, information leakage areasWorked on SOC department which runs 24*7 days and able to analyse all security incidentsHave good knowledge over OWASP Top 10 2013 vulnerabilities, SDLC, SANS Top 20 and have broad knowledge and experience in LAN/WAN, Extranet, Internet, Routers etc.Extensive knowledge of information security principles and practices, understanding of security protocols, standards and defense in depth.Automated the centralized detection of security vulnerabilities with scripts for Vulnerability assessment tools like Qualys guard and Nessus.Information protection solutions including Monitoring, DLP and Security Auditing solutions from Symantec.Working on Penetration Testing Tools: Maltego, Nessus, Burpsuite, Nexpose,