Ishita Paul

About Ishita Paul

Enterprise Cloud Security Engineer with over 2.5+ years of experience. I work closely with cross-functional teams to follow security best practices which help to minimize risks, enhance compliance, and ensure business continuity. This also aids in securing cloud applications, network infrastructure, and data storage. I constantly seek to expand my knowledge and skill-set, by honing my critical thinking skills and staying up-to-date with industry news and best practices. If you want to explore opportunities and/or collaborations, let\'s start a conversation by reaching out to me at i••••••••@gmail.com. I am sure it will lead to a passionate exchange of ideas and would contribute in creating a safe and secure future for all. Skills - Incident Management and Response | Threat Hunting | Asset and Vulnerability Management | Least Privilege Access | Data Loss Prevention Tools / Applications: Qualys | Microsoft Threat Modelling Tool | Wiz.io | Snyk | Microsoft Sentinel | ReliaQuest ServiceNow | Microsoft CASB | SentinelOne Cloud Platforms: AWS | Azure | Google Cloud Certification:(ISC)² Certified in Cybersecurity Languages: KQL | Python | Shell Script | YAML Compliance: PCI DSS | HIPPA | GDPR | SOC2 | SOC1 | ISO 27001 | ISO27017 | ISO 27018 | CE+ Other: Spotfire | Docker | CI/CD | Jenkins | GitHub Actions | Power Platform | Veracode | Zscaler

Experience

1. Enterprise Cloud Security Engineer

   Revvity

   May 2023 — Present

   Formerly PerkinElmer, Inc.• Reduced vulnerabilities in lab machines to 0, coordinating with the patch management team for CE+ certification.• Scheduled daily Zero-Day vulnerability reports for every month and work with Patch Management team to bring down vulnerability count by 80%.• Analyze threats in Wiz.io and work across teams to bring down Critical issue count to 0.• Applied least privilege access principles by providing Role-Based Access Control to users in platforms such as AWS, Wiz.io and Qualys.• Created conditional purging rule in Qualys to streamline asset management and monthly removal of over 300 stale assets on average, reducing human time and effort.• Analyze and resolve on average 15 incident tickets per month on ReliaQuest ServiceNow with a Mean Time to Resolve rate of 3 days, leveraging KQL in Microsoft Sentinel.• Drafted policy for enforcing exclusively HTTPS requests for S3 buckets to ensure encryption at rest and in transit in AWS.• Created security-centric visualizations in Power BI and Spotfire for 70 projects, fetching data from Wiz API.• Created POCs for project teams for container image scanning using GitHub Actions and Wiz CLI for detection and remediation of vulnerabilities, reducing vulnerabilities by 98%.• Established asset inventory for lab assets, based on 18 locations; each location list comprised on average 225 IP addresses, DNS hostnames and asset type, fetching data from Qualys Map Scans and Microsoft CASB

Education

• Indian Institute of Management Visakhapatnam

  Master of Business Administration - MBA

• University of Mumbai

  Bachelor of Engineering - BE, Computer Engineering

  2018 — 2022