Information Security Engineer

Untangle Solutions

January 2015 - Now

Successfully defined IT security policies and procedures to support IT function.
Conducted gap analysis of existing IT infrastructure with respect to ISO/IEC 27001 to assess existing security infrastructure.
Conducted Risk Assessment and defined prevention strategies through Risk Treatment Plan.
Ensured adherence to IT Architecture principles and guidelines along with published Information Security Standard (ISS)
(CIS Benchmark).
Identified and Reported vulnerabilities of CISCO network devices using Nipper, Cisco Audit Tool and Kali Linux.
Perform discovery and vulnerability scans on networks and validate findings through penetration testing.
Enhanced End-Point Security by developing Kaspersky endpoint security solution.
Periodically reviewed and updated documentation of the firewall environment to ensure accuracy.
Configured McAfee Vulnerability Manager 3100 and conducted Vulnerability Assessment for IT services hosted in the data
center. Monitored and analyzed resources such as OSSIM, Splunk; data feeds of alerts and logs from firewalls, routers, and
other network devices or hosts; and data feeds and/or alerts from CISCO IPS, and other host and network-based IDS/IPS to
watch for security violations and determine vulnerabilities.
Assisted with the development, maintenance of, and training on technical documentation and Standard Operating
Procedures (SOP). Specified application security testing requirements to be included within the CICD/SDLC testing
frameworks