Sachin Thapa Email & Phone Number

- Conducted technical testing and evaluation of Information Systems toensure all requirements are fulfilled in accordance with NIST SP 800-37- Produced vulnerability management reports based on current patch levels vulnerability severity, compliance standards, and malware risk levels using Tenable Nessus- Performed periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system, and external web integrity scans to determine compliance- Investigated potential cyber incidents and intrusion events escalated from assessment results- Proactively researched for Indicators of Compromise (IOC) and Advanced Cyber Threat tactics, techniques, and procedures (TTP)- Coordinated with Information Assurance managers, Security Engineers and IT Operations teams to update and maintain Systems Security- Plans (SSPs), risk assessment reports, accreditation packages, Plan of Actions and Milestones (POA&Ms), Acceptance of Risk (AOR), and other required security documentation- Developed information security reports for stakeholders, customers, and management based on Information Security operational metrics, security assessments and security reviews- Updated and maintained annual information security awareness and training program- Responsible for installation and maintenance of the Host Based Security System (HBSS/Endpoint Security) components on the McAfee ePolicy Orchestrator (ePO) Server, managed servers, and workstations- Monitored security patch levels of the servers, workstations and network environments, and anti-virus systems- Leveraged aggregated cyber threat intelligence, SIEM and AV events (logs, network flow, and anomaly data) to identify potential compromise and gaps within the infrastructure and application- Conducted in-depth security assessment of requested hardware procurement and/or software

• Resolved 30-50 tickets per day using ServiceNow and assist users with various forms of desktop support • Performed network administration functions, set up network user accounts/permissions, reset passwords, and administered group policies via Active Directory• Imported and exported email archives, map shared drive, and manage security certificate for encryption and identification• Analyzed customer needs to determine functional and cross-functional requirements• Successfully managed a demanding workload in responding to telephone calls and e-mails

Bachelor Of Science (B.S.), Applied Information Technology

Associate Of Science (A.S.), Computer Science

Education record