Krishna Chilukuri

Cyber security skills

• Incident response
• Security information and event management (SIEM)
• Endpoint detection and response (EDR)
• Malware types and Malware analysis
• Cryptographic solutions
• Threat intelligence and how threat intelligence feeds are integrated as threat signatures
• How Threat intelligence feeds are integrated using STIXX/TAXX
• Indicators of compromise(IOC) and Indicators of attack(IOA)
• Intrusion detection system and Intrusion prevention system (IDS/IPS) and its integration
• Log formats and its analysis
• Deception techniques(Honey pots ,Honey nets,Honey files and Honey tokens )
• MITRE ATT&CK frame work and basic knowledge on how its mapped
• CYBER KILL CHAIN process
• TTPS (tactics ,techniques and procedures)
• Types of threat actors
• Email security
• SSL/TLS encryption
• IP SEC
• SMTP/IMAP
• TCP/IP STACK
• FTP/HTTP/HTTPS

Vulnerability Management (Tenable security center)

• Mitigation on TenableSC
• Maintaining vulnerability reports
• Fixing the vulnerabilities
• Configure active scans
• Maintaining dashboards
• Conducting vulnerability scans across various environments (networks, systems, applications)
• Analyzing and prioritizing vulnerabilities based on risk levels and business impact
• Experience in using plugins to detect security vulnerabilities, misconfigurations, and missing patches
• Generating detailed compliance and vulnerability reports tailored for various stakeholders (technical teams, management, etc)
• Customizing reports to include necessary compliance standards
• Regular audits using Security Center to ensure compliance with organizational policies

Identity and Access management

• Identity Governance and Administration (IGA)
• Role-Based Access Control (RBAC)
• Single Sign-On (SSO) Solutions
• Multi-Factor Authentication (MFA)
• Privileged Access Management (PAM)
• Directory Services (LDAP, Active Directory)
• Federation Protocols (SAML, OAuth, OpenID Connect)
• Identity Lifecycle Management
• Incident Response and IAM