Career Objective Goal Oriented Cyber security and Endpoint security professional with more than 6.5 years of experience as an Administrator/Analyst having knowledge on various security products in configuring, implementing infra and having best analyzing, troubleshooting skills looking for challenging career in Cyber Security.
Overview
6
6
years of professional experience
6
6
Months
Work History
System Engineer
Tata Consultancy Services LTD
Senior System Engineer, Role: Senior System Administrator
Wipro PVT LTD
08.2021 - Current
Administering the topmost products in Endpoint security for Maxi’s client likely Symantec Web Prevent for DLP, Symantec Email Prevent and Endpoint for DLP, Symantec Endpoint Protection
Role and Responsibilities:
DLP:
Performed Transaction Period from TCS to Wipro
Creating rules and applying policies
Test Policies, fine tuning, and creation
Performing BAU activity
Integration of DLP with CASB
Handled Remidee/Incidents management
Performed Symantec Upgradation activity timely manner (15.4 to 15.6MP1)
DLP trouble shooting relates to Agent installation and Server connections
Performed DLP Health Check regularly
Weekly Report for Leavers
Resolving SR/CR requests and changes in Endpoint environment for Security upgradation
Worked on McAfee(Trellix) DLP .
System Administrator, Designation: Analyst
Symantec DLP, Bank of America
07.2020 - Current
14.6 MP2 and Seclore 3.1
Project, Network & Endpoint DLP initiative, an Administration role of maintaining Data Loss Prevention and Seclore for B.O.A and monitoring activity carried out for the employees of B.O.A
DLP 14.6 solution from Symantec is used for the DLP initiative to monitor or inspect and prevent all data leakage transfers through Network Monitor, Network prevent for Email, Network prevent for Web, Endpoint Prevent and for channels like Cloud Storage, Removable media, HTTP/HTTPs Server, SFTP, SMTP, CD/DVD, Print/Fax, and Bluetooth, IM or other endpoint data transfer activities carried out using different events/channels
DLP Application administration, Database and Detection Servers, policy Maintenance
Analysis for identifying and resolving incident as valid escalation (Real Positive) or False positive (Dismissal) or Business Issue (Dismissal)
Responsibilities:
Administration and Incident Monitoring using Symantec DLP 14.6 Tool
Creating POA for drills, performing Email, Web, Endpoint BCP drills to avoid business loss and enhancement of product for its functionality
Troubleshooting on issues related to technological features in DLP like agent installation, server connections, server functions, traffic observation, etc
Scheduling DFA meetings for DLP usage and to create awareness in organization by implementing policies accordingly to respective department using data profiles like IDM, EDM
Regularly Monitoring and Troubleshooting Internal Database Servers, Manager, Console Performance Related Issues as Directed by the Company Default Criteria.
Project Details: Shell (3rd Oct 2018, 7th may2020)
Administering the top most products in Endpoint security for Shell client likely Symantec Web Prevent for DLP, Symantec Email Prevent and Endpoint for DLP, Symantec Endpoint Protection, Symantec EDR 4.3,
Role and Responsibilities:
DLP:
Performing of DLP upgrade activity in a timely manner (last major upgrade was 15.5 to 15.7 MP1)
Symantec DLP Application 15.5 Administration, Baseline and Policy Maintenance
Working on DLP Cloud based connector and other detection technologies in order to achieve and maintain topmost security for an organization
Administration of DLP tool which includes configuring policies, upgrading, patching etc
Troubleshooting on issues related to technological features in DLP like agent installation, server connections, server functions, traffic observation, etc
Aggregating and Correlating the Logs and Configuring Reports, Queries, Rules, Filters, Dashboards, Real Time Alerts and Console Resource Operations in DLP
Performing Endpoint Discovery Scans and fetching reports for Sensitive Content Scanned
Analysis for identifying and resolving incident as valid escalation (Real Positive) or False positive (Dismissal) or Business Issue (Dismissal)
Working Archival of incidents and other ways to achieve incident remediation
Policy Creation and fine tunning, Windows upgradation and patch work installation
Quires and scripting for uninstallation of application
Coordinating with team for upgrades and managing application
Configuration for all application for smooth workflow
Backing up of all data
Antivirus:
Working on Server Clients, Desktops, Laptops, Virtual desktops while installing SEP clients and to maintain compliance for those endpoints
Symantec Endpoint Protection 14.3 Administration, Upgrade, Management of DAT reports, Policy, Exceptions, Troubleshooting issues, clients, and compliance management
Performing endpoint threat analysis Scans and protecting the environment from ransomwares, threats, Trojan attacks
DLP: Documents
Documented High Level Designee
Low-level Design
Test Plan been deployed before global deployment
Timely manner with proper investigation done
Overall Work:
Working on Changes for all the products in order to follow change management process and to give best performance from products
Working on SERVICENOW portal for raising changes and resolving incidents that all fall under our scope
Working on Citrix Client connection platform in order to access client environment remotely
Working with senior stakeholders, clients, managers, principals, VP's and VIP’s for better guidance of work environment
Working with Vendors and Resolving issues by performing troubleshooting in order to get RCA for all the product-based issues
Co-coordinating with Wintel team, patching team, database team, to having the baseline patching of all our infra to be done in a timely manner and to have post checks of all components.
Endpoint DLP initiative, a monitoring activity carried out for the employees of Infosys Limited
Vontu Data Loss Prevention, Endpoint DLP solution from Symantec is used for the EDLP initiative to monitor or inspect all data leakage transfers to various endpoint channels like Cloud Storage, Removable media, HTTP/HTTPs Server, FTP, SMTP, CD/DVD, Print/Fax, and Bluetooth, IM or other endpoint data transfer activities carried out using different events/channels
Responsibilities:
Detecting potential data breach incidents in timely manner and to prevent them by monitoring data in use (endpoints), in-motion (network traffic), and at-rest (data storage)
Incident management and MIS report on the incidents
Formulating various DLP policies for business users with the help of Symantec Support
Working on policy analysis and fine tuning, which helps in incident reduction by reviewing DLP events and contribute to refinement of policies leading to reduction of false -positive events
Checking for any confidential data violation for E-separation initiated employees and processing them on priority basis.
Education
B.Com Graduate -
Certified AWS Addressing Security Risk in - undefined
Certified Warm up run-in cyber security unit of Cap Gemini - undefined
Certified identifying, Monitoring and Analyzing risk and incident Response & recovery in - undefined
Administration & Implementation Certifications on Symantec Learning Portal
Yellow Belt Fundamentals & Design Thinking Training. - undefined
Skills
Technical Skillsundefined
Timeline
Senior System Engineer, Role: Senior System Administrator
Wipro PVT LTD
08.2021 - Current
System Administrator, Designation: Analyst
Symantec DLP, Bank of America
07.2020 - Current
System Administrator
Bank of America
06.2020 - Current
Senior Process Executive
Infosys BPM LTD
01.2015 - 01.2018
System Engineer
Tata Consultancy Services LTD
B.Com Graduate -
Certified AWS Addressing Security Risk in - undefined
Certified Warm up run-in cyber security unit of Cap Gemini - undefined
Certified identifying, Monitoring and Analyzing risk and incident Response & recovery in - undefined
Administration & Implementation Certifications on Symantec Learning Portal
Yellow Belt Fundamentals & Design Thinking Training. - undefined
Assistant Delivery Manager at Tata Consultancy Services, Global Shared ServicesAssistant Delivery Manager at Tata Consultancy Services, Global Shared Services