• Responsible for coordinating enterprise vulnerability management lifecycle including scanning, generating reports, prioritizing, remediation and verification.• Scoped vulnerable technologies, identifying weaknesses, severity, and impact, leading to effective vulnerability management and mitigation strategies.• Perform web application scan and website malware monitoring using Qualys WAS and Malware Monitoring Modules• Troubleshoot and resolve multiple failed scan related issues across different platforms.• Scan and review application Source codes with Snyk and coordinate remediation with application developers throughout the software development Lifecycle.• Responsible for monthly asset quality control to ensure accurate asset classification and tagging.• Use AWS Security Hub to identify and coordinate multiple Cloud Security Misconfiguration to ensure compliance with cloud security best practices.• Established and maintained weekly vulnerability Coverage Metrics• Responsible for PCI-DSS Quarterly scan and attestation of compliance submission• Install, configure, and manage Qualys Virtual appliances and cloud agents.• Review AWS WAF logs and implement IP blacklisting and whitelisting.• Create, and tune Defender ATP malware and exclusion policies to improve endpoint protection.• Create and coordinate quarterly phishing campaigns as well as security awareness training.• Perform security incident investigation and triage using run books.• Collaborated with multifaceted teams to develop strategies and protocols, lessening security risks by 25% and improving overall security effectiveness.• Review source code security scanning and coordinate vulnerability remediation prior to code promotion to production systems• Investigate multiple security incidents to ensure the confidentiality and integrity of systems.

• Conducted risk assessments, pinpointing and mitigating an average of 20 vulnerabilities quarterly, enhancing the organization's security posture.• Create and coordinate quarterly phishing campaigns as well security awareness training using Microsoft 365 Defender Security• Work independently to collect, consolidate and analyze evidence of clients PCI DSS compliance and meet the internal quality assurance requirements.• Managed the security measures of external partners and vendors, verifying adherence to necessary security protocols with a 90% compliance rate.• Represented company's technical security interests to partners to provide bi-directional flow of technical information and best practices in information security.• Monitored confidential company data and mitigated hacking through network systems updates.• Facilitated Cybersecurity awareness sessions for new Company employees, achieving a 25% increase in staff awareness.• Generated comprehensive security risk reports, enabling data-driven decision-making for vendor selection and risk management initiatives.

• Building, Hardening, Patching (RHEL 7/Centos7 Servers using 10-Recommended patches), and upgrades (release), on standalone servers (using single user mode), and on production servers (live upgrade).• Writes basic bash shell scripts to automate processes using crontab; Installs packages and applications• Cloud & On-Prem RBAC implementation• Troubleshoot RHEL7/Centos & Solaris 10 issues emanating from hardware and software related and configuration issues.• Virtualization (VMware Esxi 6.5, 6.7 and Oracle Virtual Box)• Setup a domain and an active directory on Windows 2019 servers; install and configure a samba server on a RHEL7 and mapping to the windows 2019 server.• Supporting system users and troubleshooting system issues. Document solutions for future reference.• Participating in root-cause analysis of recurring issues, system backup and security setup, Provide 24X7 support in Production, Testing and Development environments.