Soumojit Chatterjee Email & Phone Number

Bengaluru, Karnataka, India

- Configuration scanning for the OS level vulnerabilities of all the Unix & Windows Servers/VMs under SOX, PCI, TD-SOC1, GLBA, HIPAA & SHR against the standard SCML baseline customised from the CIS benchmark using Tenable IO (Agent Scan)/Tenable SC (Credential Scan) to help the organisation maintain the audit compliance and raise eGRC Archer findings for the non-compliant servers.- Tenable scan audit file creation and modification based on the annual reviews or out of band reviews of the… Show more - Configuration scanning for the OS level vulnerabilities of all the Unix & Windows Servers/VMs under SOX, PCI, TD-SOC1, GLBA, HIPAA & SHR against the standard SCML baseline customised from the CIS benchmark using Tenable IO (Agent Scan)/Tenable SC (Credential Scan) to help the organisation maintain the audit compliance and raise eGRC Archer findings for the non-compliant servers.- Tenable scan audit file creation and modification based on the annual reviews or out of band reviews of the SCML baselines and their corresponding updates once approved by the platform owners.- Troubleshooting Nessus agent issues and getting them linked to the impacted servers/VMs so that they can be scanned by the agent based scan using Tenable IO- File integrity monitoring (FIM) on Unix & Windows servers/VMs under SOX and PCI by fetching the report from Tanium for server health and change report including the Auditbeat change report for the watchlisted directories and gather the relevant CR or incident as evidence from the impacted application team via ServiceNow incident, and also getting the host health fixed by the Tanium team if they are not reporting to Tanium.- Quarterly validation of the watchlist in Tanium to keep a track on the updated watchlisted directories for FIM Show less

Bengaluru, Karnataka, India

- Access management operations which includes managing user/non-user accounts and groups on the Unix environment both locally as well as over Centrify zones- Onboarding of service accounts in CyberArk- Managing LAN accounts and all the related access in the Active Directory based on the access request by implementing the RBAC model- Remediation and hardening of all the impacted file shares on NAS (Network Access Share) as per SOX requirement- Automation of various access… Show more - Access management operations which includes managing user/non-user accounts and groups on the Unix environment both locally as well as over Centrify zones- Onboarding of service accounts in CyberArk- Managing LAN accounts and all the related access in the Active Directory based on the access request by implementing the RBAC model- Remediation and hardening of all the impacted file shares on NAS (Network Access Share) as per SOX requirement- Automation of various access provisioning tasks directly from the MyAccess requests using the BluePrism RPA tool Show less

Bengaluru, Karnataka, India

- User access management for Unix & Windows Active Directory by implementing the RBAC (Role Based Access Control) model - Creation of security policy checks and controls based on different control Modules like Active Directory, Login Parameters, Network Integrity, Object integrity, System Auditing and File based control for operating systems Windows, Unix/Linux environment, Patch management for hardening the servers using Symantec ESM (Enterprise Security Manager) & Symantec CCS (Control… Show more - User access management for Unix & Windows Active Directory by implementing the RBAC (Role Based Access Control) model - Creation of security policy checks and controls based on different control Modules like Active Directory, Login Parameters, Network Integrity, Object integrity, System Auditing and File based control for operating systems Windows, Unix/Linux environment, Patch management for hardening the servers using Symantec ESM (Enterprise Security Manager) & Symantec CCS (Control Compliance Suite)- Maintaining compliance of the servers for various clients as per the corporate standards by scanning them using the Symantec ESM/CCS policies and reporting to the security officers and stakeholders Show less