Aakash Singh Email & Phone Number

Duncanville, Tx

• Executed daily vulnerability assessments, threat assessment, mitigation, and reporting activities to safeguard information assets and ensure protection has been put in place on the systems. • Opened, Assigned, and closed the tickets assigned in SOC Security Management Console towards Qualys for various Remediation Process and Patch Management Process• Consulting for security assessments, recommendations and remediation using HIPAA, PCI DSS, COBIT, ISO 27001/2 and NIST frameworks.• Provided leadership in architecting and implementing security solutions towards Qualys and Splunk. • Highly skilled in Splunk to build, configure and maintain different environments and in-depth knowledge of log analysis generated by various operating systems. • Scheduled scans by making Asset Groups and Scan Schedule Option in Qualys guard and record issues occurring during scan. Also, schedule ad hoc scans using Option Profile.• Performed penetration testing for external facing web applications. Security areas covering DMZ architecture, threat modelling, secure coding practices (i.e., OWASP standards) and vulnerability analysis were assessed for company's internal applications.• Responsible and documenting delivery penetration testing reports that are consumable by product team engineers and digital product managers. • Conceptualized and implemented DLP Program and policies. • Managed enterprise security systems, identifying key security risks, reporting risks to management with recommendations for corrective action utilizing NIST frameworks. • Automated the centralized detection of security vulnerabilities with scripts for Vulnerability assessment tools like Qualys guard and Splunk. • Conduct Malware analysis and investigate behavioral characteristics of each incident utilizing IDS monitoring tools• Monitored, analyzed, and responded to network incidents and events. Participated in disaster recovery implementation and testing under NIST framework, HIPPA, & HITECH standards

Duncanville, Tx

• Designed and implemented WAF/LTM architecture and provided L3 support for new and existing DAS applications. • Integration of GTM into existing LTM DAS architecture.• Configuration, monitoring and troubleshooting of DAS F5 LTM and GTM infrastructure. • Remediation of existing DAS F5 LTMs• Design and implement F5 systems for High availability. • Work with internal vendors and internal teams to gather detailed technical requirements for F5 configuration. • Successfully setup F5 ASM (WAF) POC for application-level vulnerability detection and mitigation. • Track and evaluate F5 security alerts.• Upgrade F5 software, hardware, or configurations to address known vulnerabilities. • Create and maintain network and application-level documentation of NY LAW ENFORCEMENT and DAS F5 LTM/GTM infrastructure. • Developed SOPs, planned and directed an optimized process ensuring increased infrastructure reliability and availability for the business while reducing outages.• Automated process via shell scripting to collect real time statistics from all the LTMs and hosted it on the local webserver. • Implementation and testing of new iRules as per the application requirement. • Automated the process of device statistics collection via shell scripting. • Collaborate cross-team and with highest levels of program leadership on technical matters, strategy, and decision-making.• Trusted point of contact program wide for security and various technical related material matter. • Perform competitive analysis of new security technologies and advise customer principals on purchase decisions

United Arab Emirates

• Developed potent cyber security standards following NIST frameworks. • Efficiently managed enterprise security systems, optimizing intricate LAN/WAN networks.• Configured devices for remote vendors, ensuring efficient operations. Managed nationwide LAN infrastructure, including Cisco switches and routers, for seamless network performance.• Enforced security policies for compliance and administered endpoint protection rules to effectively mitigate risks.• Designed and executed Bluecoat Proxy Infrastructure, upgrading Radware Appwall WAF for enhanced web application security. • Implemented policies to restrict web access and skillfully troubleshot related issues. • Developed and executed cyber security standards (ISO 27001, PCI, and SOX) audits, ensuring robust security posture, generating insightful reports (Websense web proxy and Tufin firewall monitoring tool) and dashboards for informed management decisions. • Analyzed phishing emails, banned indicators, and educated users about prevention. • Expertly gathered and analyzed threat intelligence data, promptly banning indicators, and utilizing open-source intelligence for up to-date threat insights.• Vigilantly monitored complex LAN/WAN systems, swiftly detecting and reporting security risks.• Conducted forensic analysis, crafted tailored SIEM use cases, and ensured 24/7 support for prompt decision-making during security incidents by creating reports and dashboard to provide metrics to Management. • Collaborated with the incident response team for root cause analyses (RCAs), while adeptly managing Managed Security Service Provider (MSSP) escalation tickets.• Performed regular review and recertification of DLP Policies, TLS Domain whitelisting, SOP for enhancement with BU Risk.• Symantec DLP and RSA DLP architecture and implementation for enterprise level companies.• Reviewed encryption logs and DLP logs to regulate use base technological risk violations.

Master'S Degree, Computer And Information Systems Security/Information Assurance

Bachelor Of Technology - Btech, Computer Science