Vivek Dabholia Email & Phone Number

• Cyber Security Analyst with more than 2+ years of experience in cyber security tools, techniques, and technologies, including network and application vulnerability scanners, penetration testing tools, ethical hacking techniques, forensic analysis tools, IDS/IPS systems, SIEM platforms, and endpoint security solutions Strong understanding of ethical hacking and penetration testing, with expertise in using tools like Nmap, Shodan, Wireshark, and Metasploit Framework• In-depth knowledge of OWASP (Open Web Application Security Project) guidelines and best practices for secure application development, including code review, vulnerability scanning, and penetration testing.• Sound Knowledge of security frameworks, with a focus on the NIST Framework, as well as experience with Incident Analyzing tools like Splunk and Security Monitoring tools• Familiar with AWS Advanced Security, Amazon GuardDuty for implementing SecOps automation to enhance security posture and streamline operations in the cloud environment• Experienced in Azure Cloud security, proficient in utilizing Azure security tools like Azure Security Center, Azure WAF services to protect cloud resources and applications• Proficient in Python programming, utilizing its versatility and extensive libraries for developing custom cybersecurity tools, automating tasks, and increasing overall efficiency• Well-versed in using IDM and Okta for identity management and IAM, Resilient, Security Operations software, Application Security, Software Security, Network Security, Web Application Security, & Risk management• Expertise in analyzing packets using Wireshark to identify and investigate security incidents, and experienced in conducting vulnerability scanning and penetration testing of web applications• Hands-on Experience with Windows Active Directory and CISCO Packet Tracer to configure and maintain LAN, WLAN, and access points, and manage and maintain network security infrastructure such as firewalls, web application firewalls, IDS, and IPS to ensure the security of the organization's network and data.• Collaborated with IT Infrastructure Teams to gather information needed for Privileged Access Management (PAM) solutions, Identity Access Management (IAM), and integration with enterprise Certification systems to ensure compliance with security policies and regulatory requirements

• 

  Information Systems Security Analyst

  Western Canada Lottery Corporation (Wclc)

  Oct 2023 - Present - Canada

  • Conducted security assessments of enterprise systems, applications, and network infrastructure, including vulnerability scanning and penetration testing using tools such as Nmap, Shodan, and Metasploit Framework.• Utilized Splunk and IBM Qradar to analyze and correlate security events and alerts for incident response and provided recommendations for remediation• Managed and maintained network security infrastructure including firewalls, web application firewalls, IDS• Configured and maintained LAN, WLAN, and access points in Cisco Packet Tracer, and implemented security controls for access and authentication• Leveraged Python programming expertise to develop custom cybersecurity tools and solutions, utilizing its versatility and extensive libraries. Employed Python for task automation, streamlining workflows and enhancing overall efficiency in the cybersecurity domain• Worked with cloud security posture management (CSPM) tools like AWS to ensure secure configuration and compliance of cloud infrastructure• Monitored computer networks for security issues, suspicious or abnormal events, and investigated security breaches and other cybersecurity incidents; documented security breaches and assessed levels of damage where applicable and Utilized Splunk for log analysis and security event monitoring• Conducted a comprehensive security assessment of a web application, following OWASP guidelines and using tools such as OWASP ZAP and OWASP Dependency Check to identify and remediate vulnerabilities• Utilized Hashcat for password cracking, aiding in the identification of weak passwords and improving overall system security • Performed the deployment, integration, and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures and practices.