Analyst It Security Sample Resume 3c2o1g

SAMPLE CV Years’ Experience: 4 Key Skills Security Operation center. Information Security

Analyst - IT Security

Has more than 4 years of experience in IT Infrastructure and has more than 3 years’ experience IT Security and Risk Management. Expertise in different security products such as Antivirus, HIPS/ HIDS, NIDS, VAPT etc. audit requirements and expectations.

Antivirus management.

Relevant Experience

Vulnerability assessment.

IT Security engineer:

Penetration Testing



Worked to setup the EGI IT Security Operation to the Go-Open environment and as part of SOC I have implemented below Solutions.

URL Filtering IDS / IPS. Identity and access management.

o o o o

Event Log management.. o Security Incident Management

Education Bachelor of Technology – Electronics and Instrumentation.

Certifications

o

Certified Ethical Hacker ITIL Foundation Microsoft certified professional (AD-2008 R2) TP (Certified Penetration Testing Professional)

o

MCITP: Microsoft Certified IT Professional(Exchange server 2010) Red Hat Certified Engineer

o

CCNA Routing and Switching

o

Antivirus management Design and Implement Antivirus infrastructure for the open source and commercial products. Managed antivirus perimeter defence Managed antivirus vendor product updates and enterprise defence. Patch Management  Implement patch management process and procedure for both commercial and open source vendor releases. .  Achieve agreed KPI and SLA based on the severity.  Implemented Patch management technical solution for both Linux workstation and Linux servers by using open source products. Vulnerability Assessment and Penetration Testing  Identifying the vulnerabilities or potential threats to each resource  Mitigating or eliminating the most serious vulnerabilities for the most valuable resources  Working on Security tools like Nexpose, Nessus, NMAP, Accunetix, OpenVas, Havij, cuckoo, metasploits, Burp suit.

Event log Management  Monitoring security events from the centralized managed console and ensure the environment with secured. Identity and Access Management  Ensure that IT resources are accessed only by approved staff using IDs with appropriate compliance measures in place and executed. Implement and manage the identity management tools Security Incident Management  Implemented Security incident management process

o

Experience IT security Engineer – may 2013 to Till date

o

Technical Analyst – may 2012 to Apr 2013 System – Sept 2009 to May 2012

Professional hip Member of Microsoft research community Member of Microsoft TechNet Member Cisco Certified Community & Cisco Forums.

only for IT Security related incidents. Workstation Security  Implemented Real time monitoring for identified workstation security parameter with the Open source product. Cyber Security  Analyse and contextualize threat intelligence feeds (zero-day vulnerabilities, malware, etc.) and provide applicable solutions to implement protective controls and/or countermeasures.  Perform root cause analysis, trending and reporting for critical security incidents.  Develop and execute continuous improvement plan to optimize and improve efficiency of various cyber defence technologies  Perform routine security functions for risk detection, prevention, and response  Demonstrate technical skills in security architecture review, secure network design review, gap analysis and opportunity to fine-time and/or integrate security technologies

Member of Tech-Republic Member of Experts Exchange Member of Symantec Connect.

Technical Analyst 

Handled vulnerability assessment and penetration testing on various network/host/ web applications.



Preparing reports by differentiating the severity of the vulnerability as per the threat level. Detailed experience performing vulnerability/risk/threat assessments, configuring and monitoring network security solutions Having Strong Knowledge in Windows/linux istration & Customer infrastructure requirement. Technical assessment and review of Monitoring procedure for critical registry functions (DNS,DNSSEC,SRS,EPP,WHOIS) of registry providers. Assessment and review of firewalls, IDs, IPs, VAPT reports. Patching, monitoring process and applications.

Member of Google On-line Security Member of CVE group. Member of Open Source security Forum Member of CLAM AV Discussion forum Member of Microsoft research community

   

System 

Handled Customers network for various Security Product like Symantec Bright mail gateway for mail servers, Dell Sonic wall NSA 2400 UTM, Snort, IPTABLES



Monitoring security incidences, network/servers using monitoring tools like SNMP, Nagios, Snort, OSSEC. SQUID.



Installing, configuring and maintaining Microsoft exchange server 2010 ,

Active directory and postfix. 

The Key Responsibility for Implementation & Management of Win 2003 / 2008 Domain Controller, ADS, DNS, DH. Working on SQUID, FTP, SAMBA, creating and maintaining custom kickstart and yum repositories, SSH, NFS, FTP, Apache, Mysql for Linux Servers.



Managing Network of different Operating System such as Linux, Windows



Managing CISCO managed Switches (2950) AND 3750(L3) for the network, Dell Sonic wall NSA 2400 .



OS hardening, tuning and performance optimisation of Servers.



Maintaining strong working relationship with Technical Supervisor, Customer



Good awareness of the customers’ business and in-depth knowledge of the customer’s environment and processes.



Helping team to keep 100 % SLA for the customer.