• Perform Security Information Events and Management (SIEM) operational tasks such as analysing and filtering alerts, reporting, and suggesting fine-tune on existing rules• Investigate incidents and reviewing the alerts and perform detailed analysis on alerts• Perform internal and external security audits including vulnerability assessment and penetration testing (VAPT) for infrastructure, application, and wireless systems.• Conduct security risk assessments through business impact analysis and risk mapping against industry security frameworks• Manage access controls and authorisation for client security technology management.

• Schedule and perform regular vulnerability scans on network and systems.• Prioritize vulnerabilities based on severity.• Generate vulnerability reports for review and remediation.• Conduct quarterly security awareness campaigns, which include newsletters, phishing simulations, and training.• Collaborate with internal teams for patching and mitigation.• Conduct quarterly external scans to comply with PCI DSS and submit for ASV attestation reports as required.• Monitor DLP policy triggers, assist users with content-related queries.• Verify existing log ingestion into SIEM, create custom alerts as needed, and ensure daily log ingestion for PCI checks.• Conduct quarterly user access reviews for all critical business applications and security tools, collaborating with relevant teams.

Tutor for Masters of Information Technology students.

▪ Manage new Cyber Lab with 45 PCs running Windows, Linux, VMs, Metasploit, etc.▪ Build images in consultation with clients.▪ Test and deploy images in all the lab systems.▪ Manage user access.▪ Monitor for system intrusions.

Tutor for the Master of Information Technology students.