Security Engineer Resume Samples

Description :

1. Project lead to executing the implementation of a corporate vulnerability management program and maintaining a system of continuous remediation of vulnerabilities within compliance deadlines.
2. Responsible for analyzing potential intrusions on the network using various tools such as the Cisco Sourcefire IDS and Tenable's Security Center to differentiate between intrusions and false-positives.
3. Performed log management of corporate and client-facing systems such as ensuring log source health, monitoring abnormal log activity, performing investigations, and managing the LogRhythm appliances.
4. Maintained and updated documents per compliance requirements related to policies and procedures and worked with various teams to ensure annual inspection of documents.
5. Responsible for analyzing change requests pending approval relating to any changes performed in the client-facing cloud environments.
6. Led the Annual Incident Response training presentation to the CIO and executive management to ensure all entities understood the process of IR and their respective roles and responsibilities during an incident.
7. Provided support, investigated, documented, and performed investigations of incidents that occur in client-facing and corporate environments.

Experience

5-7 Years

Level

Executive

Education

Bachelors In Economics

Description :

1. Analyzed malicious code in support of incident analysis and response.
2. Produced technical documentation related to the scope, nature, and characteristics of malicious software that effectively communicates the threat to both technical and non-technical audiences.
3. Produced technical reports related to the scope, nature, and characteristics of malicious software and presented them to both technical and non-technical audiences.
4. Researched new trends, techniques, and packaging of malicious software staying current and ready to identify and handle zero-day exploits.
5. Performed industry-accepted standards and best practices related to incident response operations.
6. Leveraged analytical and problem-solving skills to investigate anomalous traffic on the network.
7. Configured, maintained, and managed the RSA Security Console along with the distribution of hard and soft tokens.

Experience

2-5 Years

Level

Executive

Education

M.S. In Computer Science

Description :

1. Product Co-ordination for all security products like SonicWALL, Cyberoam, Juniper, Fortigate, Symantec.
2. Converted leads to opportunities- All leads assigned were evaluated as a valid inquiry and differentiated as an opportunity.
3. Completed lists of pricing of all products & also work with distributors for aggressive pricing, to provide prices to all the salespeople ensuring good margin.
4. Suggested the best model for e requirement & therefore prepare a network diagram with design & highlight the main features of the product.
5. Followed up & Conversion - Internal follow up with Salespersons & follow up with customers to ensure maximum conversion rate.
6. Created sales orders for all orders received for security projects.
7. Followed up on delivery of hardware & licenses.

Experience

7-10 Years

Level

Consultant

Education

MBA

Description :

1. Led projects to test and deploy McAfee security protection solutions for the corporate and retail environments.
2. Deployed and tested system upgrades for Cyber-Ark Password Vault application.
3. Led team on scheduled firewall rule reviews to establish proper security controls are in place.
4. Provided support to users, technical groups, and business partners on all security and control policies, strategy, risk assessment, network connectivity, system architecture, and design requirements.
5. Worked with Internal Audit to ensure security controls met PCI/SOX compliance.
6. Created Active Directory groups to allow secure access to Windows and UNIX/Linux platforms as well as file shares.
7. Provided security administration support during disaster recovery (DR) exercises.

Experience

5-7 Years

Level

Executive

Education

Certification

Description :

1. Responsible for initiating the implementation of NIST 800-53 security controls in coordination with the System Development Life Cycle activities.
2. Performed annual security assessments using federal standards under NIST and prepares all security documentation as required by the customer.
3. Performed additional tasks such as POAM tracking, mitigation guidance, and conducting quarterly vulnerability scanning and analysis.
4. Demonstrated strong attention to detail and interpersonal skills including the ability to work with teams and handle multiple ongoing projects.
5. Participated in proposal activities as a Subject Matter Expert for information security-related sections.
6. Independent Assessor for Serco North America (NA) Cyber Security Center of Operations participating in the planning and execution of annual security assessments to verify compliance with NIST 800-53 controls.
7. Created documentation and trained the team on the support of the new business unit and IPS.

Experience

5-7 Years

Level

Executive

Education

M.S

Description :

1. Installed, configured, and supported a variety of Certificate Authorities on a variety of Operating Systems.
2. Performed regular server maintenance duties including but not limited to: backups of files and logs, installing patches, maintaining server documentation Responsible for 24x7 availability of all production IT systems.
3. Provided assistance to the PKI project team in the areas of technology and product research.
4. Responsible for managing, updating, and maintaining ORC OCSP server to provide timely CRL information.
5. Managed configuration and content changes and define requirements to meet availability goals Install and configure new software for server and network support Evaluate new products.
6. Provided focused and timely response to customer requests Perform security systems maintenance to include updates, upgrades, new implementations, and evaluations Perform general security audit and penetration test.
7. Made recommendations for changes in security architecture and policies to IT staff.

Experience

7-10 Years

Level

Management

Education

Information Systems

Description :

1. Prepared, arranged, and tested Splunk search strings and operational strings.
2. Created and configured management reports, dashboards, and alerts in Splunk.
3. Installed, tested, and deployed monitoring solutions with Splunk services.
4. Maintained and managed assigned systems, Splunk related issues, and administrators Resolved configuration based issues in coordination with infrastructure support teams.
5. IDS monitored, analyzed network traffic, log analysis, prioritize, and differentiate between potential intrusion attempts and false alarms.
6. Conducted network vulnerability assessment using tools to evaluate the attack vectors, identify system vulnerabilities, and develop remediation plans and security procedures.
7. Created and tracked investigations to resolution.

Experience

2-5 Years

Level

Junior

Education

Certificate In Business

Description :

1. Performed security research, analysis, and design for all client computing systems and the network infrastructure.
2. Scheduled the pen test for the whole year, also make sure that all the applications are covered in the schedule and completed in the time frame.
3. Built security process and procedures on vulnerability management pertaining to Network and Application security.
4. Executed and delivered weekly, monthly, and quarterly vulnerability scans & reports using approved tools like Burp Suite, Qualys Guard and HP web inspect.
5. Performed the risk analysis and write-ups for the critical & high vulnerabilities related to Network and web applications.
6. Responsible for testing web application vulnerabilities, OWASP is used as a guide in this review and testing process.
7. Investigated potential or actual security violations or incidents in an effort to identify issues and areas that require new security measures or policy change.

Experience

5-7 Years

Level

Executive

Education

B. Tech

Description :

1. Performed pen testing on the internet-facing and intranet facing applications and also on the network infrastructure of the client.
2. Executed different Crafted Payload Attacks to infiltrate the network infrastructure and application layer that is built using NMAP.
3. Created basic rules in Snort to identify the activities going on in the network.
4. Configured server, network devices, and security systems according to NIST Standard Best Practices.
5. Conducted basic penetration testing on the security systems to evaluate the security policies implemented.
6. Verified the existing access-control lists for least privilege, separation of duties, and job rotation.
7. Provided written report and oral presentation of findings to management.

Experience

7-10 Years

Level

Consultant

Education

IT Security

Description :

1. Managed Web Proxies as well as implement filter policies for inbound/outbound web traffic for CND purposes.
2. Utilized endpoint security systems to implement security policy and prevent data loss.
3. Maintained and utilized McAfee Host Based Security Suite/ePolicy Orchestrator for USCYBERCOM FRAGO 13 and CTO-133 compliancy.
4. Experienced in McAfee Host Based Security Suite include: Device Control Module, Virus Scan Enterprise, Host Intrusion Prevention, and Policy Auditor.
5. Experienced with Intrusion Detection(ID), Intrusion Prevention System(IDS), Wireless Intrusion Detection (WIDS) monitoring and analysis.
6. Performed authoring and modifications of IDS, IPS &WIDS signatures and configurations.
7. Performed data mining, event correlation, log analysis, review of security incidents log data, and correlation of these incidents for incident response or problem management.

Experience

5-7 Years

Level

Executive

Education

Information Technology

Description :

1. Implemented new security measures for virus protection, endpoint protection and email threats by recommending and using FireEye HX, FireEye ETP, Carbon Black / Bit9 and McAfee ePO.
2. Created new data sources, correlation rules and analyze potential threats on the McAfee SIEM.
3. Maintained the McAfee SIEM and manage accounts for all teams.
4. Used the Nessus Vulnerability Scanner to run weekly scans for three separate networks and create weekly security assessment reports.
5. Provided management with findings and assist different teams with remediating Critical and High vulnerabilities.
6. Collaborated with IT management on Incident Response procedures and managing security vulnerabilities while fulfilling service-level agreements (SLA).
7. Monitored Cisco Virtual Defense Center and create reports based on network activity from Source Fire devices.

Experience

2-5 Years

Level

Executive

Education

IT Technology

Description :

1. Project led for support and hardware migration of legacy firewall infrastructure.
2. Created documentation and trained team on the support of the legacy Concord firewall environment.
3. Project lead for migration of two legacy firewall request systems to the Remedy platform.
4. Documented and trained team on processes utilizing the Remedy platform for all firewall requests.
5. Project lead for migration of newly acquired company's security infrastructure to the firewall team.
6. Charged with bringing Fundxpress, an online banking provider, up to First Data Security Standards.
7. Deployed the first Intrusion Prevention System (IPS) in the US region to help mitigate SSL Denial of Service (DoS) attacks.

Experience

10+ Years

Level

Senior

Education

Master Of Business