I will be part of EY Global Delivery Services - Cyber Security Architecture Engineering Emerging Technology Consulting Service Line.

• Directing IBM Project Team during Security Tools Migration, Installation and Configuration• Participating in Project Kick Off Meetings for Anti Malware, Anti DDOS, Mail Gateway, Web Gateway, Network IPS, Host Based IPS and Web Application Firewall Technologies.• Taking End-To-End Ownership during Tools Migration, Installation and Configuration.• Providing Post Migration Support to Operation Team during S1/S2 Incidents.• Fine Tuning Perimeter and Endpoint Security Tools as part of Service Improvement Plan.• Ensuring all Security Appliances updated with Latest Stable OS and Signature Updates.• Working closely with respective Stakeholders for pending issues and ensuring all issues are addressed prior to Project Sign Off.• Conducting Architecture Review and assisting Managed Customer for Sizing related issues.• Participating in Quarterly Internal/External Audits for Security Appliances.

• Handling Incident Response Process for Tech M Global SOC Customers. • Providing Tier 2 Escalation Support for providing SOC Analysis and Recommendations for Offences triggered in SIEM Tool.• Closely working with Internal and External stakeholders across all levels for implementation of Information Security controls• Defining process for SOC operations & Incident handling process • Training subordinates with technologies managed in project. • Reviewing Daily/Weekly/Monthly SOC KPI Reports.

• Conducting POC for BlueCoat ProxySG (On Premises) and ThreatPulse (Cloud based Solution for Roaming Users).• Reviewing POC Activity Plan with Customers to ensure that Customer requirements will be taken care during POC.

• Handling S1 tickets (Network Outage) and providing RCA Reports within Service Level Agreement (SLA).• Managing 1500+ Fortigate and Cisco ASA Firewall• SIEM Dashboard and Log Monitoring for Suspicious activities towards customer infrastructure.• Taking End-to-End Ownership of Offences Triggered in McAfee Nitro SIEM and Providing Incident Analysis and Recommendations.• Updating IOCs received from Cert-In, Threat Intelligence in SIEM Watchlist.• Configuring Mitigation settings (countermeasures) for protection against DoS(Denial of Service) and DDoS DNS/NTP amplification, TCP Flood attacks using Arbor.• Creating custom Signature on NIPS and WAF based on customer requirement for known CVE.• OS Upgradation and Patch Installation to fix existing bugs in Security appliances.• Troubleshooting performance related issues on Security appliances.

• Configuring Policy Rules, Static Routes, S2S VPN and NAT on Checkpointand Fortigate Firewall• Configuring Internet Access Policies for Users/IP address/Networks/UserGroups/Domain, Exception List, Category and Protocol Filter SSL Decryption Bypass Rule on Websense Web Gateway.• Configuring Proxy Authentication Bypass for Specific Destination Domain,Source IP address on Websense Content Gateway• Configuring Groups (Server, USB Enable, Workstation), Application & Device Control Policies, LiveUpdate Policies, Exception Polices on Symantec Endpoint Protection Manager• Creating Managed/Unmanaged Symantec Endpoint Protection Packagesfor Windows Clients.• Performing Firewall Policy Review as part of Service Improvement Plan and Removing Unused Policy to improve Security Appliance Performance.

• Troubleshooting technical issues reported for Cisco Routers, Cisco Catalyst Switches, Cisco ASA, Websense Web Gateway, Juniper Secure Access, RSA Authentication Manager• Configuring Site to Site VPN on Cisco ASA appliance and Cisco Routers• Configuring Policy Rules, Static Routes, S2S VPN and NAT on Cisco ASA and Fortigate Firewalls.• Configuring Internet Access Policies and assigning it to Domain Users/User Groups on Websense Web Gateway.• Assigning Tokens from RSA Authentication Manager to domain users for SSL VPN Portal Login• Preparing Monthly Internet Activity Reports (Top Users, Top Categories, Top URLs) from Websense Web Security Gateway for Higher Management