Jabin Khan

About Jabin Khan

Cyber Security

Experience

1. Architect - Cybersecurity & Risk Services

   Wipro

   Oct 2021 — Present · Pune, IN

   Vulnerability Management and Application Testing:• Working as a Cyber Security Architect for one of Wipro’s premier client helping them to setup a productsecurity team on the “Shift Left” approach.• Oversee day to day activities of Vulnerability Management including Container security (EKS),AppSec Testing and Application Risk Assessment.• Develop a broad and deep technical understanding of applications, services and architectures.• To develop and implement Security GuardRails for Application security assessment before transition,transformation, migration.• Working knowledge of OWASP Web/API vulnerabilities (CSRF, XSS, SQLI, etc.) and compensatingcontrols. Review and recommend missing application security controls.• Research and maintain knowledge of changing landscape of application security, latest threats andscanning tools, techniques and Procedures.• Docker image scanning and providing recommendation of prioritizing reported security defects.• Evaluate Container scanning tools requirement such as Clair, Prisma Cloud Compute.SOC & Incident Response Lead:• As a Lead for UN client of a SecOps team in day-to-day monitoring and resolution of Cyber Securityincidents within established Service Level Agreement.• Responsible to institutionalize on integration of 20~ log sources to Counter Threat Platform (CTP) ofSecureWorks (EDR).• Monitor & Investigate alerts received from multiple threat sources like EDR – RedCloak, Azure AD - UEBA.• Network Systems Monitoring, McAfee EPO, Cloud App Security, Azure Security Center, O365 Security & Compliance, Defender, Firewall, CISCO Meraki, System Center Endpoint Protection & User Reported(Phishing/SPAM analysis).• Create manual and Power BI reports and dashboard to provide metrics of SOC operations in a meaningfulway for CISO and Sr. Management of Wipro.• Played an important role for all integrations, business and technical requirements of Security IncidentResponse (SecOps) Module.