Uma C Email & Phone Number

Charlotte, North Carolina, United States

• Developed custom SIEM deliverables in Splunk/McAfee/Q Radar/ArcSight to meet customer needs in a variety of domains: IT security, financial, IT ops, human resources, physical security, etc.• Design, development, implementation, tuning and testing of standard and nonstandard content for McAfee SIEM (Nitro).• Perform Digital forensics and Incident Response (IR) using tools Autopsy, Magnet, Stinger, etc. 28 DOL agencies• Served as the primary SME for RSA SecurID and all multi-factor authentication products including Azure MFA.• Maintained GIT repositories, branches and tags and Experience in Administering GITHUB repository.• Played a key role in deploying Symantec Endpoint Protection Manager and clients on a closed network• Worked as a PCI-DSS consultant to perform a 3rd party audit.• Involved in DLP data encryption, monitoring/reporting and remediation of internal and external threats/vulnerabilities.• Provided Azure Security and Compliance reviews and solutions for government systems to facilitate the secure and compliant use of Azure for government agencies and third-party providers building on behalf of government.• Ensured Azure Government system was compliant to meet a FedRAMP Provisional Authority to Operate (P-ATO) and DoD Provisional Authorization (PA).• Understand the threat landscape as related to vendors and perform vendor risk assessments Assist penetration testing and investigation.• Collaborate with Internal audit, External Audit, SOX PMO in a regular cadence, discuss changes to the control environment and prepare effective, efficient compliance and substantive test plans and SOX Calendar.• Work closely with the Risk and finance teams to associate a monetary value to security risks within the User Behavior Analytics (UBA) tool.• Worked on projects moving to cloud services such as Azure, Office 365 and Amazon Web Services (AWS).

Irving, Texas, United States

• Proactively implemented updates, maintained, managed, monitored, and supported enterprise network and systems security operations infrastructure throughout the shared services environment.• Perform daily DLP Incident monitoring, analysis and reporting, solution checks, client interaction, and day-to-day DLP operations. Managing SIEM - Net forensics• Create and run routine reports and data analytics in Excel and Tableau. Audit and validate data/reports• Responsible for delivering an end to end continuous integration - continuous delivery system for the products in an agile development approach using Chef/Ansible and Jenkins and Shell Scripts.• Wrote Ansible playbooks to setup Continuous Delivery pipeline and this primarily consists of a Jenkins and Sonar server, the infrastructure to run these packages and various supporting software components such as Maven.• Managed the large security, risk and compliance initiatives of SOX-404 IT, PCI DSS and HIPAA/HITECH, Privacy Act, and FTC including security policies, procedures and controls.• Experience with Windows, Linux, vulnerability assessment tools, firewalls, IDS/IPS, HIPS/HIDS, Nessus, NMAP, SIEM, Splunk, Rapid7 Nexpose and Insight,Vm, WAF, routers, switches, VMware, Endpoint Security, Cloud Security, Symantec Endpoint Protection.• Assesses a residual risk rating for the vendor based upon their control environment.• Monitor, analyze and 0respond to network incidents and events. Participate in disaster recovery implementation and testing under NIST framework, HIPPA, & HITECH standards.• Work with the network team to architecture Azure and AWS VPN, AWS Direct Connect, and Azure Express Route connections• Providing proper remedy to fix vulnerability in the client network after analyzing security incident queries alerted by ArcSight Performing Vulnerability Assessments and taking the required counter actions and measurements to ensure the security of the IT infrastructure / systems.

Hyderabad, Telangana, India

• Responsible for installation and maintenance of new network connection for the customers.• Configured all the required devices and equipment for remote vendors at various sites and plants.• In-depth expertise in the implementation of analysis, optimization, troubleshooting and documentation of LAN/WAN networking systems.• Manage enterprise security systems, identifying key security risks, reporting risks to management with recommendations for corrective action utilizing NIST frameworks.• Design and Implementation of Bluecoat Proxy Infrastructure. Upgrading Radware Appwall WAF (Web application firewall) and fixing hot fixes and patches.• Supported nationwide LAN infrastructure consisting of Cisco 4510 and catalyst 6513.• Worked with cisco routers 2600, 2900, 3600, 3800, 7200 and 7600 and switches 2900, 3560, 3750, 4500, 4900, 6500• Perform ISO 27001, PCI and SOX Audits and drive them to the closure of findings.• Developed Cyber Security Standards on NIST Frameworks and insured their proper implementation to reduce the risk of vulnerability to IT assets.• Implementing various policies as per client compliance to restrict web access, troubleshooting proxy related access issues and generate Internet access reports using Websense web proxy• Creating compliance rules, extracting Security risks and auditing the policies in firewall using Tufin firewall monitoring tool• Reviewed encryption logs and DLP logs to regulate use base technological risk violations• Upgrade, managing and troubleshooting various issues with Cisco IPS• Rules implementation, log analysis, logical troubleshooting and managing various Checkpoint products-Power-1, UTM-1, Smart-1 appliances and Cisco ASA appliances• Part of Disaster Recovery Datacenter’s Security Configuration and Management team