Anil Bhat

About Anil Bhat

I am a results-driven cybersecurity leader/professional with over 16 years of experience…

Experience

1. Manager of Security Engineering - Network & Cloud Security

   Global Payments Inc.

   Nov 2015 — Present

   Architected the Zscaler URL filtering solution. Integrated the URL filtering solution with ADFS proxy for user tracking. Configured the Zscaler URL filtering to inspect SSL traffic. Configured the Zscaler URL filtering for malware detection, advance threat detection, sandboxing and file detection. Developed a URL filtering policy standard working with risk team and also developed a procedure to whitelist policies for users based on their job functions. After moving the applications to the Google Cloud Platform applied various security controls using IPS, WAF, GCP platform firewalls and other security tools. Implemented Checkpoint IPS blade to inspect outbound and inbound internet traffic. Fine-tuned the policies for false positives. Policies which were not applicable to current environment was disabled. Developed a procedure to fine tune IPS policy so SOC can use it for white listing false positive blocks. Implemented and managed Cisco Firesight Management Center Deployed and configured various Source fire IPS sensors across the enterprise. Developed a procedure to fine tune IPS policy so SOC can use it for white listing false positive blocks. Applied ASM WAF policy to different applications and worked with application team to fine tune the WAF policy. The F5 ASM WAF policies were developed using positive security model. The WAF policies followed the SDLC standard. The policy was first applied in QA environment, then promoted to CERT and eventually it was deployed in the PROD. A strict change control procedure was used when the policies were promoted from one stage to another. The F5 ASM logs was configured to send to the SIEM device by configuring the logging profile. Real Traffic Policy Builder was used to build WAF policies for various applications Azure and GCP application deployment with focus on security for IAAS and PAAS workloads