Develop technical security controls and secure configuration baselines for all technologies both on-prem and cloud based on industry best practices for security benchmark such as CIS.• Leads investigation and develops audit reports and metrics to assist misconfiguration owners with remediation efforts.• Implement secure configuration baselines in the supported detection tools such as Qualys and Wiz.• Build and configure tool integration for Service Now to import detected misconfiguration in Service Now Configuration Compliance module.

Leads cybersecurity risk identification and risk management frameworks while providing guidance to the team to evaluate severity and mitigation plans.• Collaborates with stakeholders on requests for new and changing technology solutions, acting as a trusted business partner and advisor.• Responsible for driving the remediation of known vulnerabilities within the Organization’s environment across all device types and platforms. • Hands-on experience of vulnerability tools like Rapid7, Tanium including prioritization of remediation-based technologies for identified risk.

As SME, led redesign effort for SEIM program for an organization including redesign of existing data models, requirement gathering, use cases development, automation, and implementation of Splunk Enterprise Security. This effort resulted in SEIM maturity increase from level 1 to 3.• Strong understanding on GDPR guidelines and experience in designing DLP response processes around it while partnering with legal and forensic teams.• Leading Incident Response Project which includes enhancing current Incident Response Plan, creating Playbooks such as Ransomware attack, Data breach and Third-party compromise and a enterprise level Table Top Exercise• Performed incident response for endpoint and network security incidents, including cloud-based applications like SharePoint website, suspected account compromise, insider threat, malicious software and scripts, phishing and business email compromise, 3rd party breach and external network attacks.• Redesigned phishing response process to improve response time, increase user awareness, raise number of reported phishing emails resulted into reduce rate of account compromise at organization level.• Hands-on working knowledge with a variety of security technologies and processes including SEIM, IDS/IPS, malware analysis and protection, content filtering, logical access controls, data loss prevention and security incident response.• Moved Workflow of all malware related events to Splunk, created playbooks, developed process, enriched data in Splunk• Current role’s responsibilities include performing threat hunting, creating reports and dashboards for internal cybersecurity (including CISO) and external partners (ABO’s)• Completed 6S project and won Business Impact Award in Cummins for reducing response time in DLP