Saranya G Email & Phone Number

Conducting penetration testing for web applications based on the OWASP framework, identifying vulnerabilities, and providing recommendations for remediation.Performing Vulnerability Assessments using tools like Nessus Scanner, Tenable.io, and Rapid7 Insight VM to identify system weaknesses and prioritize remediation efforts.Managing vulnerabilities using platforms such as Tenable.io, Rapid7 InsightVM and ensuring timely remediation of identified security issues.Handling incidents and Data Loss Prevention (DLP) in cloud environments using tools like Netskope and Microsoft Sentinel, effectively responding to and mitigating security incidents.Implementing data management solutions using Azure Purview, ensuring data governance, classification, and compliance.Managing OS patching and vulnerability fixing using Microsoft Intune and SCCM, ensuring systems are up to date and protected against known vulnerabilities.Dealing with Advisory reports on active Zero-day exploits, staying updated on emerging threats and providing guidance on mitigation strategies.Creating comprehensive reports and standardizing procedures to document findings, recommendations, and best practices for clients and internal stakeholders.Delivering engaging presentations to clients and developers, effectively communicating complex security concepts and recommendations.Actively participating in cybersecurity events like ISACA, staying connected with industry trends and networking with professionals in the field.Engaging in Hackathons and solving Capture the Flag (CTF) challenges, continuously enhancing technical skills and staying sharp in cybersecurity practices.

Vancouver, British Columbia, Canada

• Teaching students on Data Center Security, Cloud Security,Software security, Web security and Network security labs every week.• Checking assignments, proctored tests, and provided grades according to university standards.

Hyderabad, Telangana, India

Assisted the SOC team in effectively monitoring alerts and system log files, ensuring accurate identification, categorization, and assignment of incidents to the appropriate investigation tier. Played a key role in automating reporting processes, dashboard creation, rule creation, and rule review, streamlining operations and enhancing efficiency.Troubleshoot complex issues arising in the SOC, applying advanced technical skills to identify and resolve security incidents and system malfunctions.Conducted daily health checks and performed administrative tasks for the SIEM platform and related components, ensuring optimal performance and system availability.Contributed to the creation of technical and process documentation within the SOC, enhancing knowledge sharing and standardization of procedures.Engaged in discussions with management to address cybersecurity issues and provided input in drafting and editing information security policies, standards, and processes.Proficient in responding to security incidents and implementing necessary solutions.Utilized Security Information and Event Management (SIEM), Intrusion Detection & Prevention (IDS / IPS), Data Leakage Prevention (DLP), forensics, sniffers and malware analysis tools.Manage Splunk (SIEM) configuration files like input, props, transforms etc.Well versed in both remote and on-site user Splunk (SIEM) Support.Vulnerability Management: Configured Qualysguard Tool for Vulnerability Analysis of devices and Applications.Capable of identifying, analyzing, and resolving vulnerabilities using Threat Hunting and MITRE ATT&CK framework.Experienced in Vulnerability Management and Penetration Testing, as well as detecting application-level vulnerabilities such as XSS, SQL Injection, CSRF, authentication bypass, cryptographic attacks, and authentication flaws.

Hyderabad Area, India

Provided IMS (Infrastructure Management Services) End-user services.Worked on Nagios Monitoring tool and OTRS ticketing tool for Windows and Linux systems.Worked on Various tools Wise package studio, Admin Studio, Citrix XenApp, Microsoft APP V 5.0, AppDNA, Citrix profiler, VMware ThinApp Virtualization.Application deployment and OS patching using Microsoft SCCM and Microsoft Intune.Creating reports and standardizing the procedures.Worked on Windows Server 2003, MS Active Directory 2003, MS Exchange Server 2003, MS IIS 6.0Worked in the Incident Management and Response team for Windows and Networks.Experience in Application Virtualization and Packaging.Conducted webinars, learning sessions and gave presentations to Delivery unit heads, Clients, Senior Project Managers, and learning enthusiasts.Documented and registered the issues encountered during the working phase of an application along with mitigation steps and creating a knowledge basePerformed quality testing on applications for their functionality and behavior.