Naveen Kumar Email & Phone Number

Doha, Qatar

Chennai

Leading the SOC and infrastructure event management activities.Assist with designing and documenting work processes within the SOC, Upgraded the LogRhythm SIEM software based the version release compatibility from LogRhythm•User access entitlements and Management on Active Directory, Microsoft ADLDS, Lotus Domino, RSA SecurID, Symantec VIP Manager, AD Self Service, ACF2 and RACF.• Distribution and reporting of SSL VPN.• LDAP administration using Lotus domino and Softerra.• Implemented LogRhythm for multi customers and on-board 3000+ log sources using various collection methods like syslog(Network devices), UDLA(Security Application like MCAfee, Symantec DLP, WMI, API(AWS, OKTA, Rapid7 etc), Flat File Collection and Agent based collection and Agent remote based collection.• Vulnerability scanning for IP and Servers.• McAfee ePO Administration and Reporting.• Endpoint threat detection and response platform that enables SOC and incident response (IR) teams to prepare for a data breach through continuous endpoint recording, customized detection, live response, remediation, and threat banning using CARBON BLACK.• Working on Intruder Alert Administrator GUI interface to perform administrative tasks such as connecting or disconnecting from Managers, configuring agents, creating and managing domains, creating policies.• Working on Intruder Alert Event Viewer GUI interface to view/monitor event data captured from the Agents. Intruder Alert reads the NT event logs on the agent servers and records the events in a database within Intruder Alert.• SSAE 16 and Termination review.• Monitor Service Desk Request queues and respond to incidents within established timeframes.• Resetting Disaster Recovery ID’s.• Internet security and Administration.• Mainframe audit using ACF2 and RACF.• Creating SOX audit reports for internal and external purpose (ACE insurance, Hamilton, MIgroup and PROSIGHT).• Validating ACF2 security reports.

Chennai, Tamil Nadu, India

• 7+ Years of experience in Identity and Access Management (IAM), User Access Provisioning, Access Review, Web Access Management and Privileged Identity Management.• Provisioning and de-provisioning access in more than 110 applications which includes vendors’ managed Web apps, Database such as Oracle (10g&11g), Sybase Servers etc.• Manage the day-to-day log collection activities of source devices that send log data to ESEM (SIEM) RSA – Envision• Extract the logs, Perform real time log analysis using SIEM technologies and Forensics Analysis of logs as per the request• Administering LAN and Email (Birth Right Access) accounts of the users across Fidelity Investments• Handling Incident Management tickets, PPMC and Service Center Tickets for the Information Security and Technology Risk Team in Fidelity• Experience in Network Intrusion detection/Intrusion Prevention System and Firewalls.• Strong Working Experience with Active Directory and Identity Manager.• Very good understanding in information security concepts and in-depth clarity of Identity and Access concepts and latest trends.