Aravind Krishnan

A versatile Cyber Security and Information Security professional with 10+ years of experience of hands-on experience in diverse sectors including Manufacturing and Technology Services. Deep understanding in IT Security, Risk and Compliance, and Cloud Security domains. Proficient in conducting Security Assessments and possessing a comprehensive understanding of Cyber Threat Intelligence and Cyber Threat Hunting methodologies.

Skilled in effective incident response procedures, and managing vulnerability assessments to fortify organizational defenses. A strong background in Cloud Security, including extensive hands-on experience in DevSecOps processes, CI/CD tools, and AWS services. Customer-focused and collaborative with a track record of delivering excellent support to customers while adding value to the team.

Lead Information Security at GlobalFoundries Pte Ltd (2022-12 – Present)

• Vulnerability program management and assessment using Qualys. Deployed Qualys agent on 95% of the assets and taken steps to remediate 45% of the vulnerabilities.
• Managing security baseline, and implementing cloud security controls
• IT Security controls for private and public cloud, and Fab tools.
• Working on security improvement projects/tools (ex. Deployment of Qualys and, MS Defender). 95% of the asset covered by Defender.

Senior Consultant – IT Security at NCS Pte Ltd (2022-02 – 2022-10)

• Preparation of the Hardening Guide for the Cybersecurity products/tools
• Validating the implementation of the required IT Security Controls.
• Verifying the Vulnerability assessment report. Planning and coordinating for the resolution.

Senior Cloud Security Analyst at Thales DIS Pte Ltd (Ex. Gemalto) (2019-03 – 2022-02)

• Analyzing the Cybersecurity events in CrowdStrike EDR, GuardDuty, File Integrity Monitoring, and GCP SCC are analyzed, assessing the risk, and reporting.
• Steps taken for CIS level 1 compliance of AWS Golden AMI.
• Using AWS Inspector for Vulnerability Assessment, reviewing the vulnerability reports and follow the process for the remediation.
• Working with the project team to fix the deviations and meet the regulatory and compliance requirements.

Senior Security Engineer at Thales DIS Pte Ltd (Ex. Gemalto) (2013-03 – 2019-02)

• Part of the Security team, managing firewalls, IDS/IPS tools, and Forward proxy, VPN's.
• Using Nessus for Vulnerability Assessment and reporting.
• Review of firewall rules, reporting and fixing any deviations.
• Deploying new VPNs for client connectivity and troubleshooting connectivity issue.

Technical Specialist – Network Security at American Telegraph & Telephone (AT&T) (2009-11 – 2013-08)

• Service Transition to Operations for new customers. It involves discussion with Account Manager to understand Customer Infrastructure, SLA, Change/Incident management procedure.
• Requirements gathering, GAP analysis for new projects for team.
• Part of Network Security team that provided Service Delivery and Service Assurance in for over 100 customers.
• Involved in Disaster recovery testing, in which my task was to configure a firewall, update the firewall policies and establish the required connectivity for testing.
• Technical responsibilities include managing firewalls, creating, and troubleshooting of VPN's, managing of F5 load balancers, proxy devices.

Network Engineer at DXC Technologies (2006-03 – 2009-11)

• Part of Internal network team which takes care of Datacenter networking and Enterprise network.
• Technical responsibilities include, configuring and managing L2/3 VLAN, Routers, Firewalls and Switches.
• Establishing leased line or VPN connectivity to customers and troubleshooting any incidents with connectivity.
• Managing Internet circuits, IPLC and NLD circuits.

Master of Business Administration (MBA) in Information Systems – Sikkim Manipal University

Bachelor of Science in Information Technology – Sikkim Manipal University

Diploma in Information Technology – Nettur Technical Training Foundation (NTTF) IT Center Bangalore