Diligent Cybersecurity leader with proven track record in cybersecurity consulting for over 15 years. Leveraged expertise to enhance security protocols and mitigate threats, ensuring robust protection for clients' digital assets. Demonstrated analytical thinking and problem-solving skills in high-pressure environments.
Results-driven certified IT professional with notable success in planning, analysis and implementation of security initiatives. Strengths in providing comprehensive network design and security frameworks.
Overview
14
14
years of professional experience
1
1
Certification
Work History
Cybersecurity Consultant / Leader
HCL America Inc.
Princeton, NJ
07.2022 - Current
Client Overview: Large-scale Fortune 500 Life Sciences company
Tech stack: Wiz, Qualys VMDR, Symantec CCS, BigFix, AWS, Microsoft Server, RedHat Linux, Sentinel, ServiceNow VM & GRC, Cisco ESA, Microsoft O365, BigIP F5 LTM
Improved client cybersecurity posture through tailored risk assessments and mitigation strategies by implementing industry best tools like Symantec CCS and Tenable
Reduced cyber threats by implementing robust security frameworks for patch and vulnerability management leveraging BigFix
Achieved cost savings for clients by identifying areas for improvement in existing cybersecurity infrastructure and automation of tasks
Enhanced network security by conducting comprehensive vulnerability assessments and penetration tests leveraging Qualys VMDR for on-prem
Recommend improvements in security systems and procedures.
Conducted manual security reviews to identify configuration gaps in critical infrastructure stack like AWS, Rubrik, NetBackup, VMware
Devised and implemented processes and procedures to streamline operations.
Generated reports detailing findings through ServiceNow VM and GRC modules.
Applied strong leadership talents and problem-solving skills to maintain team efficiency and organize workflows.
Led team by answering complex customer questions and mentoring personnel one-on-one.
Part of Information Security Risk Management team of the Group Security Office primarily responsible for IT Risks and Controls assessment
Conducting comprehensive security reviews of all infrastructure solutions, components and business applications
Collaborating with Information Security Governance team to conduct post-implementation reviews of TRAs completed
Conducting security reviews of on premise to public cloud migrations happening bank wide
Conducting pre-go live reviews of all the new implementations in cyber security landscape
Conducting annual network architecture reviews of the Data Center, International Offices and determine any gaps in security or any known artefact that may compromise the security
Conducting comprehensive application security control assessments of all the business applications
Conducting manual and tool based configuration reviews and report any unauthorized changes on network and security devices
Conducting AV reviews of the endpoints, servers in the Data Center, Head Office, Local and International Branches
Setup closure meetings with all the stake holders to highlight risks and finalize action items with target dates
Track review findings in Archer and validate closure once the resolution is completed
Working on Adhoc projects assigned by senior management for security solution evaluations, baseline reviews, information security policy reviews
Working with external auditors during yearly audits to assess any gaps raised and coordinate with IT team for timely resolution to get audit certifications
UAE’s largest Bank
Consultant – Security Architecture and Design
BT
India | UK
04.2017 - 12.2019
Client Overview: Large-scale Finance Institution in UK
Tech stack: BigIP f5 LTM,GTM,ASM, Cisco ASA, Juniper Netscreen, Checkpoint, Bluecoat, WSA, ESA, MS Visio
Designing network security solutions for EN account Nationwide Building Society
Working closely with pre-sales team on various new and existing bids
Understanding of RFPs, RFIs, BOMs, TSDs, Proposals, Sizing
Working with E2E designers, solution Architects & Engineering teams for input and to understand and incorporate changes in the designs produced
Preparing HLDs and LLDs based on the information gathered from network practice team and providing the solution
Approval / Rejection of network security changes done by implementation team and check the configurations as per requirement
Providing implementation and troubleshooting support to team if required
Senior Executive – Information and Technology Group
Hitachi
New Delhi, India
12.2016 - 03.2017
Company Overview: Large-scale conglomerate head quartered in Japan
Lead HIL offshore team for migration of Hitachi Regional Headquarters network and security operations handled by Infosys
Knowledge Transfer to HIL offshore team from Infosys for Datacenter LAN/WAN architecture, remote offices connectivity, DR sites, process management
Handled client technical escalations for priority incidents, change and service requests
Worked as a design lead in HIL for network and security solutions of Hitachi Group Companies
Handled client meetings, attending IT conferences, supporting as a pre-sales engineer for new group companies requirements
Prepared design documents and network HLDs and LLDs of cost effective solutions, taking approvals from Hitachi Japan ITD
Provide implementation support to team if required
IT Analyst
TCS
Stockholm, Sweden | India
07.2014 - 11.2016
Client Overview: Leading Airline Industry in Scandinavia
Worked for a leading Airline Industry in Scandinavia onsite in Sweden
Understanding client’s requirement, selecting suitable network security products, and designing the network architecture (HLD, LLD and BOM)
Administration of Network Security Firewalls Checkpoint and ASA
Preparing SOPs and basic troubleshooting guides for support team
Handling Issues related to Data Networks, Traffic optimization, Network Latency, QOS
Hands on experience on installation of Checkpoint Security Management and Gateway, configuring Security Policies, NAT, Routing, VPN, Cluster on GAIA platform
Designed, Implemented and Administrating Direct Access VPN solution for client
Designed, Implemented and Administrating Microsoft Reverse Proxy solution WAP for client
Integration of different appliances for better security solutions for ex: Integration of Cisco Ironport WSA proxy with Cisco CDA for transparent identification solution, integration of SIEM tool (RSA SA) with network appliances for reporting
Worked in the team as a Senior Engineer, handling escalations, Vendor Co-ordination, Client Co-ordination, Weekly Meetings and QBR’s
Leading Airline Industry in Scandinavia
Senior Specialist
HCL Technologies – Cisco TAC
Noida, India
12.2010 - 06.2014
Client Overview: Multiple Large to SMB of Cisco (B2B)
Worked as a Cisco TAC red badged engineer in Security team specializing in next-gen Cisco ASA, Firepower Firewalls
Assisted clients in Planning, Design and Deployment of new Networks for optimal network performance
Provided priority support to clients during a New Implementation or a Network Down situation
As a senior engineer in the team, mentored the new joiners and provided them Training & Support, during their initial phase
Hands on experience on configuration and troubleshooting ACL, NAT, DHCP, Application Layer Inspection, FTP, WCCP, QOS, Botnet, Net flow, Logging, Threat Detection, HA, IPSec, ISKAMP on all versions of ASA
Troubleshooting performance Issues like Firewall Crashes, CPU Utilization, interface issues, Firewall Hang, Architecture of devices, Network Configuration, Firewall Performance, and Network Performance
To isolate the issue and then coordinate with different teams like WAN, LAN etc to make sure customer gets expert team according to the issue
Follow proper escalation and documentation procedure given by Cisco Systems
2023-2024: 35% reduction of vulnerabilities in client environment by infrastructure standardization and patch automation
2022-2023: Enhanced client cloud security posture by asset tagging and compliance fulfillment
15% YoY improvement in MTTR by identifying continual improvement areas and streamlining processes
2022-2024: Responsible for two folds revenue increase and margin by farming opportunities
2020-2021: Reduced security expense by $1.2M after careful elimination of redundant tools from infrastructure
2018: Designed and Implemented another layer of logical DC to fulfill micro-segmentation needs and PCI-DSS standards
Mobility
Open for remote / onsite / hybrid role. Authorised to work in US with L2S visa status.
AWARDS & RECOGNITIONS
Star of the Month TCS May, 2015
Top Quarterly Performer HCLTech Q3 2012
Gold Club League Member HCLTech 2012-2014
Strengths Interests
Strength is to adapt efficiently in changing working environment and the ability to lead as well as work in a team effectively., Interests are travelling and music, which help me maintain my equanimity.
Languages
English
Full Professional
Certification
Certified Payment-Card Industry Security Implementer – CPISI