Sooraj Kumar

About Sooraj Kumar

With close to 13 years of experience in cybersecurity, I bring a comprehensive understanding of SOC & NOC operations, Incident Response (IR), and Risk Management. My career has been dedicated to safeguarding organizational assets and enhancing security frameworks. I have a proven track record of managing complex security operations, leading incident response efforts, and implementing robust risk management strategies. My expertise in these areas enables me to effectively protect against threats and ensure the resilience of critical systems and networks. I am passionate about advancing cybersecurity practices and driving innovative solutions to address evolving challenges in the digital landscape.

Experience

1. Director (Cybersecurity Governance & Operations) - Naval Communication Network (Ncn)

   Indian Navy

   Jul 2020 — Present · Kochi, IN

   Led cross-functional teams of 50+ professionals (SOC, NOC, Purple Team, CIRT) overseeing the Naval network of the Southern Naval Command- Managed assets and users on the Naval Communication network- Directed the migration to a single forest, single domain architecture from a multi-domain setup- Implemented Public Key Infrastructure (PKI) for Multi-Factor Authentication (MFA) using Embridge- Proficient with technologies including Microsoft Active Directory 2016, Kaspersky Security Centre 14, Microsoft Exchange 2016, Checkpoint 5600, Trellix FireEye FX & NX, VCenter 7.0 (ESXi 7.0.2), Veeam, WAF (ModSecurity), Nessus Tenable.SC, HP ArcSight SIEM, Data Resolve (DLP), Seclore IRM, SharePoint 2013, Jitsi VC Solution, SCCM 1902- Commissioned the Naval Communication Network (350 Cr) project- Coordinated Purple Team VAPT operations utilizing tools such as Metasploit, Burpsuite, Nessus Tenable.SC, and ZAP- Conducted product security testing during acquisition and deployment processes- Established and maintained a comprehensive enterprise risk management program encompassing technical, business, and human risk analysis- Familiar with standards and frameworks including NIST 800-53, ISO 27001:2022, ISO and CIS- Tested IT and business response plans through tabletop and Red Team exercises to ensure preparedness for various scenarios- Enhanced risk reduction through technology, vulnerability management, and improvements to the Governance, Risk, and Compliance (GRC) process- Developed a cybersecurity strategy and roadmap for the organization.

Education

• Mahatma Gandhi University

  Bachelor of Science - BS, Information Technology

• Rajagiri College of Social Sciences

  Post Graduate Program, Computer Science

• Birla Institute of Technology and Science, Pilani

  Master of Science - MS, Business Analytics