Kumar B

About Kumar B

I am a cybersecurity professional with over 8 years of experience in managing and enhancing security across diverse areas, including risk analysis, SIEM, endpoint security, data loss prevention, and network security. My technical expertise spans from vulnerability assessments with Qualys, Nessus, and Rapid7 Nexpose to network security configurations such as firewalls (Checkpoint, Cisco ASA, Fortinet) and IDS/IPS solutions. I have a comprehensive understanding of regulatory frameworks, assisting in integrating standards like HIPAA, PCI, and NIST into organizational security strategies and leading efforts in compliance with SOX and PCI standards. In my role, I actively conduct vulnerability assessments, penetration testing, and threat hunting, leveraging frameworks like MITRE ATT & CK to enhance detection and response capabilities. I stay updated on current threat landscapes using threat intelligence feeds, integrating these insights into our proactive security efforts. I also support accreditation and authorization processes by preparing and reviewing System Security Plans (SSPs) to meet stringent compliance requirements, including those from the Department of Defense (DoD). I have implemented security governance practices, ensuring adherence to ISO 27001 and other standards, and developed security configurations using Tripwire and Veracode technologies. My work includes both static (SAST) and dynamic (DAST) security testing, automating assessments to secure applications at every development stage. Additionally, I provide technical assistance for Symantec Endpoint Protection, supporting clients in configuring and maintaining endpoint security to address diverse cybersecurity challenges effectively.

Experience

1. System Administrator

   Raymond James

   Aug 2023 — Present

   Administered 150+ Linux servers (Ubuntu, CentOS), focusing on performance optimization,high availability (HA), and proactive troubleshooting using Nagios, Prometheus, and Zabbixfor real-time monitoring, log aggregation (ELK stack), and issue resolution. Ensured scalability and fault tolerance by configuring VMware ESXi, vCenter, and managingAWS EC2 instances, applying auto-scaling policies, and integrating Elastic Load Balancers(ELB) for seamless application delivery. Configured BGP, OSPF, and VXLAN routing protocols to optimize data flow between onpremise and cloud infrastructure, ensuring secure and efficient communication in hybridcloud environments. Configured iptables and firewalld for advanced firewall management, enforcing trafficfiltering, NAT policies, and network segmentation to bolster internal network security andreduce unauthorized access. Deployed and maintained LAMP stack (Linux, Apache, MySQL, PHP), optimizing databaseperformance through indexing, query caching, and slow query logs, while ensuring securecommunication with SSL certificates. Automated cloud operations using AWS CLI and CloudFormation, managing EC2 instancesfor workload scaling, disaster recovery, and high availability across critical productionenvironments. Managed and optimized NFS file systems across Linux servers to enable high-speed dataaccess, configuring rsync-based backup systems and integrating AWS S3 for cloud storage. Configured and maintained OpenVPN and IPsec VPN solutions to provide secure site-to-siteand remote access VPN tunnels, ensuring data integrity and encryption. Managed incident tickets and resolved system issues through ServiceNow, collaboratingwith cross-functional teams to perform root cause analysis (RCA), ensure service recovery,and improve uptime.

Education

• Jawaharlal Nehru Technological University Hyderabad (JNTUH)

  Bachelor's degree, Computer Science

• Concordia University-St. Paul

  Master's degree