Experience

Credible

• United States
• Financial Services
• 100 - 200 Employee

• Cyber Security

  • Jul 2019 - Present



Federal-Mogul Motorparts

• United States
• Automotive
• 700 & Above Employee

• Cyber Security Consultant

  • Sep 2018 - Jul 2019



Pennsylvania Department of Transportation (PennDOT)

• United States
• Truck Transportation
• 700 & Above Employee

• Senior Threat Analysis Engineer

  • Dec 2016 - Sep 2018



Deloitte

• Business Consulting and Services
• 700 & Above Employee

• Cyber Security Analyst

  • Jan 2015 - Dec 2016

  • Worked in a Security Operations Center (SOC) environment• Provided 24/7 network surveillance and configuration recommendations for over 2000 computers spanning various countries across the globe (for major airlines, power plant and investment firms)• Utilized Splunk, Arcsight, Qradar SIEM tools to filter and investigate events for possible intrusions.• Conducted detailed & comprehensive investigations and triages on wide variety of security events, and implement cleanup and remediation processes• Investigate on latest cybersecurity attacks on customer’s network for e.g. • Exploit kits, Malwares, Web Attacks, and Email Phishing etc.• Performed full packet analysis and identify malware infection vectors, traversal and behavior.• Investigated and made decisions on alerts generated by IPS, correlate events via SIEM with log data, netflow data and both known and unknown IOC’s.• Performed various searches in the environment based on the latest threat intel.• Tools used daily for investigation and analytics purposes are SourceFire IDS/IPS, Carbon Black, Proofpoint, Securonix, Panorama, Bromium, and various SIEM’s. • Identified vulnerabilities and recommended corrective measures and ensure the adequacy of existing information security controls.• Prepared detail practices and procedures on technical processes• Analyzed security incidents and presented monthly reports in a Security Operations Center (SOC) environment• Created runbooks and SOP’s for rules on SIEM platform Show less

• Cyber Threat Hunter

  • Jan 2015 - Dec 2016

  • Gathered latest and existing threat intel for trojans/virus/droppers etc. from various sources and convert the IOC’s obtained to sensible filters and test these filters/rules against network/host traffic• Perform network traffic analysis and event log correlation to identify malicious activity• Created mutex specific watchlists for various RAT’s including poison Ivy• Provide creative and innovative solution• Tools used daily for Investigation and Analytics purposes are SourceFire IDS/IPS, Carbon Black, Proofpoint, Securonix, Panorama, Bromium, and various SIEM’s. Show less

• Risk Assessment Consultant

  • Jan 2016 - May 2016

  • Integrated a new software into an existing Splunk environment • Provided security solutions.• Established logging policy



Microsoft

• United States
• Software Development
• 700 & Above Employee

• Network Engineer

  • Nov 2014 - Jan 2015

  • Worked on Azure Cloud • Created virtual networks with site-to-site VPN • Worked on Azure Cloud • Created virtual networks with site-to-site VPN



Wichita State University

• United States
• Higher Education
• 700 & Above Employee

• Graduate Teaching Assistant

  • Dec 2012 - May 2014

  Grader for digital circuits course

• Graduate Teaching Assistant

  • May 2013 - Jan 2014

  Worked on concepts related to access controls, firewalls, malware etc. Conducted lab session to clear assignment related work.