Hari Edara

About Hari Edara

A security assessor knowledgeable in Security Development Life Cycle (SDLC), incident…

Experience

1. Senior Information Security Engineer

   Texas Attorney General

   Aug 2017 — Present

   Endpoint threat management, protection, and threat hunting via CrowdStrike • Email threat management and protection via Proofpoint Email Gateway (Essentials/TAP/TRAP/CLEAR/DMARC/Email Protection/Browser Isolation, Symantec and O365 Security and Compliance. • Support all phases of Incident Response: Preparation, Identification, Containment, Eradication, Recovery • Triage and lead response to information security events/incidents to include security vulnerabilities, intrusions, phishing, malware, network anomalies, and/or computer forensic investigations • Threat hunting via Splunk/Sentinnal • Vulnerability Management via Tenable.sc/.io and Web Application Scanning via Tenable. WAS/IBM App Scan/Veracode. • Hands-on OWASP TOP 10: Responsible to conduct Vulnerability Assessment for a Web App. Conduct fully manual web application testing with in-depth knowledge of OWASP top 10 vulnerabilities. Security policies and Vulnerability management • Maintaining compliance requirements (IRS, HIPAA, NIST and TAC 202). Participated and successfully completed IRS Security Audit • Ensured security controls are implemented correctly, operating as intended, and meeting security requirements. • Developed NIST Compliant vulnerability assessments, technical documentation, and Plans of Action and Milestone (POA & M), and address system weaknesses. • Worked with systems owners, and other stakeholders to manage cybersecurity requirements. • Performed regular systems security scans, and maintained records scans in POA & M. • Reported Daily/weekly/Monthly executive metrics and security metrics as needed. Lead security awareness and education initiatives and designed and implemented phishing testing for Employees through KnowBe4