Amit D

Seeking for Position related to cyber security in an organization to utilize technical skills in developing policies to safeguard sensitive and critical data and help the growth of organization & personal. To counteract the threats related to cyberterrorism or Information technology.

Senior Information Security Manager - SA Technologies contracted to KSB - Pune

(2023-05 - 2023-12)

• Monitor (SOC) security operations and infrastructure.
• Maintain all security tools are updated and review security technologies to latest.
• Monitor internal and external policy compliance with NIST and ISO 27001 controls.
• Monitor regulation compliance.
• Work with different departments and teams in the organization to reduce risk.
• Audit policies and controls continuously and revise the Information security policies.
• Creating out the security incident response program.
• Creating and reviewing SOP for Security alerts and incident handling.
• Schedule meeting with clients for conducting Penetration Testing, Vulnerability Assessments and Audit.
• Scheduling the meetings for clients for audit, penetration testing for building secure information security posture.
• Creating the incident response playbooks for automated response using python.
• To develop, deploy and test the python for Security Testing.
• Run PowerShell from using a Docker and also manually perform security testing, Using PowerShell for exploitation.

IT Security Consultant - Nihilent - Pune

(2022-08 - 2023-02)

Worked as an information security consultant specializing in enterprise information security, SIEM, Vulnerability Assessment, SPAM email Analysis. Has more than 8.5 years of experience in IT infrastructure projects & service delivery.

• Handled Security Alerts handling include analysis, documentation, searching & reporting.
• Responsible for threat monitoring, searching, analyzing and visualizing the data in real time.
• Involved in the company's information security program; security practices and & plays the role of information security consultant.
• Helping clients to secure the data & duties include information system security governance, SIEM and Vulnerability management, pen testing.
• Installation, Uninstallation of agents from EDR, VA, Proxy Security Tools.
• Worked on Python for automation, scripting, Report Generation, security testing.
• Using PowerShell from using a container, security testing, Using PowerShell for exploitation.
• Performed ManageEngine Log360 integrations, Fine tune, create and set correlation rules to detect security threats.
• Performed SIEM product upgradation, installation and deployment of services offered in log360 SIEM.
• Worked on SIEM Workflows for automated incident response.
• Fine Tune, Co-relate and schedule Reports for Threat Analysis and mitigation.
• Installation, Uninstallation of servers and Integrating with SIEM modules.

Senior IT Cyber Defense Analyst - Allscripts India - Pune

(2016-01 - 2022-08)

• Worked on SIEM with Splunk Administration tasks including user management, Splunk Apps, Splunk Configuration Files, Users, Roles, and Authentication, Getting Data in and Distributed Search.
• Worked with splunk for Security data analytics, Correlation and security event monitoring, Forensic analysis, Incident detection and response, Threat intelligence.
• Work with SOC team to operationalize and automate remediation wherever possible to achieve SOC incident response maturity.
• Provide necessary support during audits, forensics investigation and threat hunting.
• Security Operation Activities includes monitoring health Dashboards, Investigation, Analysis, creating documentation and knowledgebase articles.
• Assist to recommend security solutions to management for better malware detection and endpoint security.
• Works with fine tuning IDS/IPS for Monitoring intrusion detection & prevention system investigate and Analyze.
• Investigation of SPAM emails and report.
• Works with EDR and NDR to Verify and fine tune the security alerts to see if its malware, false positive or if internal.
• Report cloud security metrics based on security alerts triggered on their priority to management.
• Monitor and report the various security alerts that are threat to organization & work on the remediation.
• Monitor the Azure Security Center and analyze the alerts triggered from Azure Blob Storage, Containers, Keyvaults or from Internal Users etc.
• Works with EDR and NDR to Analyze the traffic flow over the network & to verify applications, payloads, URLS. Check the traffic detected is internal & legitimate.
• Performed Vulnerability Assessments with Nessus and Qualys.
• Participated and Performed the red team exercises conducted by Cisco during internal training sessions.
• Including identifying the vulnerability and penetration testing with known tools.
• Worked on python from scratch for automation, scripting, Report Generation, security testing and building IR playbooks.
• Using PowerShell from container and manually, security testing and for exploitation.

SOC Analyst - IBM / Contracted to Netconnect

(2013-12 - 2015-01)

• Worked on SIEM to gather security-related events from end-user devices, servers, network equipment and even specialized security equipment like firewalls, antivirus or intrusion prevention systems & to Monitor and recommend improvements based on events or incidents of apparent security breaches in areas including networks, applications, databases, systems, and endpoints.
• On-site L1 support for security Incident Management Response to report, monitor and handle the incidents to avoid service discontinuity with BMC remedy.
• Worked on the web application firewall to detect and block the suspicious signatures and IP Addresses & Worked on the web application security to protect web application environment.
• Performed Vulnerability Assessment.

B.E - Electronics - University of Pune (2011)

Diploma - Electronics - MSBTE (2007)