Cyber/Cloud Security Engineer Resume

SUMMARY:

Experienced Cyber Security Professional wif more TEMPthan 9 years of experience including 7 years in Agile Methodologies and 3 years in Cloud (AWS and Microsoft Azure).
Experience specializing in Vulnerability and Risk Assessments, Governance& compliance frameworks, NIST CSF, OWASP, ISO27001/2, CIS.
Technical Experience wif End Point Security and End Point Detection and Response, Firewalls, Data Loss Prevention, NAC, Email Security, SIEM, Vulnerability scanning tools, Cloud security, Amazon Web Services(AWS), Microsoft Azure.
CEHv8 Certified.
Collaborative team player as well as strong ability to work independently.
Excellent English communication skills both verbal and written.
Project Management
Conflict Management
Creative Thinker
Agile Methodologies
Efficiency Improvement
Prioritization
TEMPEffective Communication
Adaptability

PROFESSIONAL EXPERIENCE:

Cyber/Cloud Secu rity Engineer

Confidential

Responsibilities:

Preforming Security Reviews and Best Practices Assessments as per Customers and Projects Requirements.
Performing GAP Assessments in the Cyber Security Infrastructure Design, Amazon Web Services(AWS), Configurations, Process and Policies.
Performing Threat Hunting, Investigations and Analyzing Threat Landscape using Endpoint Detect and Response Solutions and SIEM.
Providing Advisory Services to Clients to address Security weaknesses and identify potential new cloud security solutions.
Offer consultative advice in security principals and best practices, Providing Roadmap and recommendation for implementation of missing Controls.
Performing Vulnerability and Threat Risk Assessments, identifying relevant Controls and Developing Security Metrics.
Devising customized security policies and procedures as per Security Governance and Compliance Frameworks like NIST CSF, PCI - DSS, ISMS 27001/2, CIS Controls.

Senior Cyber/Cloud Security Engineer, Information Security Analyst

Confidential

Responsibilities:

Performing Risk Assessments for Core banking infrastructure and Recommending relevant controls for risk mitigation.
Support the implementation of risk mitigation programs that ensure or improve the TEMPeffectiveness of risk management and protection strategies.
Provide direction for security performance, capacity and overall security architecture solution for business projects and internal infrastructure projects.
Assist in Management of Cyber/ Cloud Security solutions and provide consultative advice in security principals and best practices as trusted advisor using Microsoft Azure.
Implementing information security controls. Ensuring compliance to PCI/DSS and ISMS 27001/2 frameworks.
Assisting wif internal/external audits and threat/risk assessments to ensure compliance wif security policies, standards and procedures.
Developing Information Security and compliance policies, procedures, standards and guidelines based on Cloud Security Governance and Compliance Frameworks.

Information Security Engineer/Analyst

Confidential

Responsibilities:

Review security-related events, assessing risk and validity, and reporting of findings.
Performing Vulnerability Assessments using Trustkeeper, Foundstone for PCI DSS to minimize risk against internal & external threats.
Management and monitoring of Enterprise Cyber Security SOC which includes Endpoint Security, SIEM, Web Gateway /Proxy, Email Gateway, IDS/IPS, Firewalls, DLP, Encryption.
Deploying and implementing information security controls. Ensuring authorized access by investigating improper access; revoking access; reporting violations.
Assist wif investigations of network and hosts/endpoints for malicious activity, to include analysis of event data, and assist in efforts to detect, confirm, contain, remediate, and recover from attacks.
Assist in developing Information Security and compliance policies, procedures, standards and guidelines based on knowledge of best practices and compliance requirements.

System Security Engineer

Confidential

Responsibilities:

Designing and implementing System & Network security solutions including Web Gateways, E-Mail Gateways, DLP, IDS/IPS, Anti-virus, anti-spyware, E-mail Server Security, Epo Server, Application control, End point Encryption, Policy Auditor, Network Access Control, Site Advisor.
Providing technical support for Endpoint Security products (Anti-Virus/Anti-Spam, DLP, HIPS, NAC, and SAE).
Define System & Network Security solutions policies, rules, tasks, alerts and views based on customer requirement.
Develop and maintain projects related documentation including deployment guides, procedures, policies, project proposals.
Providing Technical support for system and network security issues to customers remotely and on site to resolve the issues in timely manner.