Kishan Cpent, Casp, Jpen Email & Phone Number

Chicago, Il, Us

Chicago, Illinois, United States

Processes both internal and external Cyber Threat Intelligence for determination of impact, hunting to determine scope, and implementation of mitigations to defend client enterprise.Conduct trending and correlation of cyber intelligence for the purposes of attribution and establish strategic countermeasures to increase defences, including customized signatures, in-house identified indicators of compromise and behaviours associated with targeted behaviour, with support from the Threat Monitoring team.Collecting and analysing author threat intelligence reports covering new threats, vulnerabilities, products, and research.Experience with host and network log sources to apply to investigation, IR methodology in investigations, and the groups behind targeted attacks.Collecting data from intelligence communities, threat intelligence platforms, open-source data repositories, and other sources to analyse TTPs and Anomalies.Create and maintain operational reports for Key Performance Indicators and weekly and Monthly Metrics.Perform initial risk assessment on new threats and vulnerabilities, perform assessment phase of Vulnerability & Threat Management process.Perform assessment as well as troubleshooting and help isolate issues with IDS/IPS sensors, Antivirus servers, Vulnerability scanners.Performed continuous monitoring on Information Systems using NIST SP 800-137.Responsible for Security Information and Event Management (SIEM), Vulnerability Management, Incident Management & Response.Determining and documenting actual implementation of agency provided security controls and enhancements.Experience in Qualys tool to conduct vulnerability management. Schedule weekly or monthly scans as requested by division agencies.Administering Qualys by creating multiple sites, tags, static/dynamic groups, reports on a regular basis.Produce vulnerability, configuration, and coverage metrics and reporting to demonstrate assessment coverage and remediation by using Qualys.

Chicago, Illinois, United States

Created, Updated, and maintained threat models for a wide variety of software projects.Provided security architecture and design guidance to application development teams.Monitored security infrastructure for threats and intrusions and responded to security incidents promptly.Participated in incident response planning and exercises.Developed and utilized advanced tools for penetration testing and exploiting vulnerabilities.Provided security and vulnerability remediation expertise to technology stakeholders and partners.Perform web application testing, mobile application testing, network penetration testing, and source code reviews.Participated in the implementation of AWS Cloud security for applications deployed in the Cloud.Security assessment of online applications to identify the vulnerabilities in various categories like Input and data Validation, Authentication, Authorization, Auditing & logging.Performed security assessment of PKI Enabled Applications.Developed threat modelling framework (STRIDE, DREAD) for critical applications. Identified potential threats and developed mitigating controls for the applications during the development phase.Reviewed source code (Java/J2EE/Spring/FTL/JavaScript) and developed security filters within App-Scan for critical applications.Reviewed Android and iOS mobile code for mobile apps and recommended code fixes.Worked with the Incident Response team (events from DLP) in reviewing events generated by DLP and guided in identifying the root cause of the event and a solution to resolve it.Participated in the Proof of Concept (POC) to implement Check Marx (a code analysis tool for web apps).Performed the penetration testing of mobile (Android and iOS) applications, specifically, APK reverse engineering, traffic analysis and manipulation, and dynamic runtime analysis.

Bengaluru, Karnataka, India

Implemented and managed security tools such as firewalls, SIEM, Intrusion Detection System/Intrusion Prevention System, and endpoint protection systems.Prepared reports for senior management on the state of vendor compliance.Act as a subject matter expert on risk-based security reviews and assessments of third-party vendors.Drive continuous improvement in network security through regular review and revision of existing strategies.Diagnosed and resolved complex network problems and improved network performance and reliability.Reviewed Architecture Design Documents (ADD) and Solution Overview Documents (SODs) to identify security anomalies in the system architecture and design and provided recommendations to address data security and privacy concerns.Reviewed security vulnerability reports for applications and databases and analyzed and worked extensively with the development teams for the implementation of mitigating controls.Implemented IBM App-Scan standard, source editions, HP Web-Inspect, and Qualys-Guard web application scanners. In addition, the security tools Metasploit and Burp-Suite were utilized for manual penetration testing.Conducted manual source code reviews of the client-facing Wyndham brand web and mobile applications, including iOS and Android mobile Apps. Black box pen testing on internet and intranet-facing applications.Providing fixes & filtering false findings for the vulnerabilities reported in the scan reports.Performed Static and Dynamic Analysis and Security Testing (SAST and DAST) for various applications as per the firm’s security standards (i.e., OWASP, SANS 25).

Bengaluru, Karnataka, India

Managed the design, installation, and management of organization WLAN, WAN, Network segment and internet system.Optimized network performance and reliability by maintaining hardware and software, analyzing technical issues, and ensure availability to systems userMonitored and configured all data center network devices to support 5000+ users.Administered and configured all NOC owned tools/applications including scripting, customizations, report building, alert modifications, automations and maintenance.Analyzed employee behavior patterns, access logs, and other relevant data sources using User and Entity Behavior Analytics (UEBA) tools like Exa beam or Varonis to identify potential insider threats.Collaborated with cross-functional teams and utilized incident response and case management tools such as ServiceNow or IBM Resilient to investigate and assess the severity of identified threats, ensuring timely and effective response measures were implemented.Developed and maintained threat detection strategies and protocols using threat intelligence platforms like ThreatConnect to enhance the company's resilience against insider threats.Conducted regular risk assessments and vulnerability scans using tools such as Nessus, Qualys, or Rapid7 InsightVM to identify potential security gaps and areas for improvement.Participated in by-weekly Windows and UNIX server SSIP patching.Administered a network system including telecommunication circuits, VLAN, LAN/WAN systems, routers, switched, firewall, VoIP systems, servers, storage, backup, operating systems, and core applications.Configured, implemented and managed various routers and L2 switches.

Bengaluru, Karnataka, India

Ensured network, systems, and data availability and integrity through preventative maintenance and upgrades.Performed password administration and access support for Active Directory and several core-business applications.Administered and supported remote desktop connections like VDI, VMWare, Citrix and VPN remote access (Cisco AnyConnect Secure Mobility Client).Communicated with Help desk, Problem Management, Change Management, Business Continuity, Third Party vendors regarding outages and incidents created.

Master'S Of Science, Business Analytics, A

Bachelor Of Technology - Btech, Aeronautical Engineering