Di Karthi

Security-focused Network and Infrastructure Engineer with hands on experience across SOC monitoring, network security engineering, and cloud security in highly regulated financial environments (Citi, Bank of America). Skilled in SIEM-based threat detection and alert triage (Splunk, ArcSight), firewall and IPS management (Palo Alto Networks, Check Point), Zero Trust Network Access (Cisco ISE, ZTNA), and hybrid cloud security (AWS, Azure, GCP). Experienced in incident response, vulnerability mitigation, security automation (Python, Ansible), and regulatory compliance (PCI-DSS, SOX, GLBA).

CompTIA Security+ certified and seeking a remote Security / Network / SOC Analyst role.

Network Security Engineer at Bank of America (2024-01 – Present)

• Configure, patch, and manage enterprise-grade firewalls (Palo Alto Networks, Check Point) and Intrusion Prevention Systems (IPS) to control and secure network traffic across a multi-billion-dollar banking environment.
• Implement and maintain Network Access Control (Cisco ISE) and Zero Trust Network Access (ZTNA) frameworks to ensure only authorized devices and users connect to the corporate network.
• Integrate network infrastructure logs with SIEM platforms (Splunk, ArcSight) to deliver centralized monitoring and full security visibility. Partner with the Cyber Security Operations Center (CSOC) to investigate security alerts, block active cyberattacks, and remediate vulnerabilities in real time.
• Secure hybrid cloud infrastructure configuring VPCs, security groups, and cloud-native firewalls. Maintain encrypted remote access using IPsec/SSL VPNs and Secure Access Service Edge (SASE) technologies for global business units.
• Automate firewall rule deployment, security audits, and SIEM log-forwarding workflows using Python and Ansible.
• Leverage Splunk and ArcSight dashboards to audit traffic and ensure compliance with PCI-DSS, SOX, and GLBA regulations, remediating gaps identified during security reviews.

Jr. Network Support Engineer at Citi (2019-05 – 2022-07)

• Monitored global network health using Splunk, Grafana, and NetScout, proactively flagging bandwidth anomalies and device disconnects. Triaged, logged, and resolved Layer 1–3 technical tickets via ServiceNow, including configuration errors, VLAN updates, and switchport resets.
• Identified critical network disruptions and escalated severe incidents to Senior L3 Engineers and platform architects.
• Supported weekend change windows for router deployments, line patching, and automated script testing.
• Built and maintained technical runbooks, connectivity diagrams, and asset registries in compliance with financial-sector audit standards.

Master's Degree in Information Systems and Cyber Security Management – Lindsey Wilson University (2022 – 2023)