Vivek Sugee

Security Manager with 8.5+ years driving enterprise security governance, compliance, and operations across fintech, software, and logistics. Hands-on expertise in CrowdStrike EDR, DLP, Email Security Wazuh SIEM, AWS /Azure cloud security, IAM, compliance frameworks (ISO 27001, PCI-DSS, CICRA, NPCI), and regulatory audit coordination. Proven ability to scale security operations, design ISMS frameworks, manage threat detection, and govern vendor risk.

Manager - Information Security Engineering - ZET Technolabs Private Limited - Bengaluru

(2024-09)

Lead (Head) Information Security Engineering, owning the IT and Information Security function and serving as the primary SPOC for IT & security-related matters.

• Lead security governance, annual compliance (ISO 27001, PCI-DSS, CICRA, UPI, DPDP) and audit-readiness activities across the organization.
• Design ISMS documentation library, maintain version control, board approvals, alignment to standard framework.
• Coordinate with IT, business, risk, compliance, and external stakeholders to identify and mitigate information security risks.
• Govern vendor risk: DPA reviews, sub-processor assessments, vendor risk tiers.
• Own security operations: deploy & manage CrowdStrike EDR, DLP, Wazuh SIEM, alert triage, threat hunting, MTTD/MTTR optimization.
• Administer IAM stack (JumpCloud, OKTA, AD), implementing least-privilege access, SSO integration, periodic access reviews, identity lifecycle management and oversee email security operations.
• Manage cloud security: GuardDuty triage, remediate IAM wildcards, WAF, CNAPP (CWPP/CSPM), KMS, CloudTrail.
• Own SCA program: SAST/DAST in CI/CD, CycloneDX SBOM tracking, Dependency-Check & Trivy scanning, CVE triage & remediation.
• Manage network security: Zscaler SWG/DLP, Twingate ZTNA, Checkpoint/FortiGate policies, wireless (Aruba), DNS/DHCP hardening.

Security Engineer - Junglee Games Pvt. Ltd. - Bengaluru

(2022-06 - 2024-07)

• Implemented ISO 27001 ISMS: policies, audit cycles, risk assessments, control testing, remediation tracking.
• Managed Coralogix SIEM: log collection, alert correlation, threshold tuning, incident analysis, forensics.
• Integrated SAST (OX Security) & DAST (Edge Scan) into development pipeline; tracked vulnerabilities, provided secure coding guidance.
• Administered enterprise tools: Trendmicro AV, Forcepoint DLP/proxy, Jamf/Intune endpoint management, Google Workspace, OKTA.
• Conducted security assessments, pen tests, vulnerability scans; designed remediation roadmaps.
• Managed firewall infrastructure (FortiGate 400E, Checkpoint 5200): policies, VPN, traffic monitoring, incident investigation.
• Manage enterprise security tools including antivirus software (Trendmicro), Web proxy and DLP (Forcepoint) solutions, and Endpoint management tools (Jamf and Intune).

Executive (Corporate IT) - Blue Dart Express Ltd. - Mumbai

(2020-08 - 2022-05)

• Managed enterprise firewall infrastructure (Checkpoint R80): created and updated security policies; configured network segmentation rules; deployed VPN tunnels for remote access; monitored daily firewall alerts and logs; performed incident investigation and threat analysis.
• Administered web security gateway (Forcepoint 8.5): managed URL filtering and content blocking policies; configured DLP rules to prevent data exfiltration; monitored and reported on web traffic patterns; implemented user access controls.
• Managed email security infrastructure (IMSVA Trend Micro): deployed spam and malware filtering; configured email encryption policies; managed message archiving; monitored email traffic for security incidents; responded to phishing reports.
• Managed network intrusion detection and prevention (McAfee IPS): monitored and updated attack signatures; configured IPS policies for threat blocking; performed log analysis and incident response.
• Deployed and managed antivirus enterprise solutions (McAfee ePO, Deep Security Trend Micro): orchestrated antivirus policy updates across endpoints; performed patch management; coordinated vulnerability remediation campaigns; maintained compliance reporting.
• Performed daily security monitoring: updated DAT files, virus definitions, and threat databases; maintained system health logs and performance metrics; troubleshot security tool issues.
• Executed monthly security patch management cycles: identified applicable patches/hotfixes; tested in staging environment; deployed to production on schedule; documented patch inventory and compliance.
• Managed infrastructure environments: VMware and Nutanix virtualization; server provisioning and hardening per security standards; maintained inventory of hardware assets.

Executive (Corporate IT) - Infrastructure & Support - Uniquee Enterprises (Contract @ Blue Dart) - Mumbai

(2019-04 - 2020-03)

• Installed and maintained Windows Servers (2008, 2012) and Linux environments; performed hardening per industry security standards; managed domain configuration and user access.
• Supported enterprise server hardware: Dell PowerEdge R630/R740, Lenovo System X series; maintained system performance, health checks, and preventive maintenance.
• Configured and managed VXL Thin Client devices; set up device policies, network connectivity, and access controls.
• Performed user support on desktops and laptops; executed patch management and software deployment on established schedules; resolved hardware and software issues.

Technical Support Engineer - IDFC Bank - Mumbai

(2017-11 - 2019-02)

• Managed incident and change management lifecycle in BMC Remedy ITSM: categorized and prioritized technical issues; ensured resolution within SLA ETAs; coordinated with support groups and stakeholders.
• Tracked and escalated service requests to appropriate teams (user management, email management, infrastructure support).
• Performed root cause analysis and documented incident resolutions in knowledge base.
• Maintained service desk metrics and reporting on ticket volume, SLA compliance, and resolution times.

Bachelor of Engineering - Electronics & Communication - Government Engineering Colleges, Ramanagara (2011 - 2016)