Mukesh S Ceh Ecsa

About Mukesh S Ceh Ecsa

Experience in Information Security Management using SIEM, Web APP testing,VA and PT tools including ARCSight ESM,RSA Metasploit, Backtrack Wireshark nmap and Coreimpact with strong capability to plan, implement and configure solutions ensuring high availability and other delivery related aspects of Technology practice.Skilled in Security Advisory, Vulnerability assessment tools, Anti-malware, Anti-Trojan and Internet/web security.Experience in Anti-Phishing operations such as implementing Digital watermarks on resources and assets, configuring web server referrer alerts to prevent/detect phishing sites. Involved in Projects for Vulnerability assesment, Penetration testing and SIEM for Various customers.Good Communicator with Exceptional Analytical, Learning, Relationship Management and Coordination Skills. I have a high capacity for learning, pick up new skills and ideas quickly, and generally thrive on challenges.SpecialtiesAs a Security Engineer executed projects in Banking Domain.Experience in Security Testing for large user based.Handling various technical aspects like project documentation, report preparation, security metrics and reviewing the documents.Experience of running vulnerability scanner and penetration testing on Devices and analyzing the reports.Creating application Threat Models and delivering Design Threat Summaries to customers.Knowledge of open source & commercial security testing tool.Good communication & interpersonal skills, committed, result oriented, Quick Learner.Well versed with all the Testing Concepts & Methodologies.Follow operational process and procedures to appropriately analyze, assist in remediation of critical information security Vulnerabilities

Experience

1. Cloud Security Manager

   Oracle

   Jun 2015 — Present · Bengaluru, IN

   From June 2013 to June 2015 IT Security AnalystFROM June 2015 to august 2016Position: Member Technical Staff, Penetration & Vulnerability QAFrom September 2016 to presentSenior Member of technical Staff,CLOUD OPERATIONSProject Name: PDIT Security Project• Conduct infrastructure security testing including penetration testing & configuration review.• Responsible for testing Fusion Middleware Security Penetration and finding Vulnerabilities in all product suites. • Fixing issues with the QA & development engineers and management to debug the issues and come up with alternative solutions. • Prepare and produce the report, on issues observed during the assessment including recommendations and agree actions and track all the findings to closure.• Analyze and prioritize results based on defect severity and business impact and submit reports to asset owners• Provide solution / co-ordinate with asset owners to remediate the findings.• Develop and publish new security lockdown standards and review existing standards.• Performs real-time investigation, analysis on events logs using SIEM tools (Qradar) of Network Security Components and devices such as Firewalls, Intrusion Detection System (IDS), Operating Systems like Windows, UNIX, Proxy Servers, Windows Servers and Networking Devices.• We ensure the network is up-to-date on version running depending on the intrusion detected on the IDS and same to be cross verified by risk management team• We monitor the networks like firewall, IDS, Switches, routers and load balancer• Troubleshooting and fix the network issue. Also ensure to escalate to required LOB to check for impact from the network side. And to fix with necessary changes within the SLA• DDOS mitigation with arbor peak flow. SIEM monitoring and remediation discussed with Risk management for the patch. Reporting with daily, monthly and yearly report of threat analysis

Education

• Visvesvaraya Technological University

  Bachelor of Engineering (BE), Electrical and Electronics Engineering

  2006 — 2010

Skills

• Metasploit
• Ids
• Firewalls
• Cissp
• Pci Dss
• Juniper
• Ips
• Incident Management
• Ecsa
• Checkpoint
• Backtrack
• Security
• Oscp
• Gpen
• Vulnerability Management
• Ceh
• Vulnerability Assessment
• Active Directory
• Information Security
• Siem
• Ccna
• Network Security
• Servers
• Itil
• Penetration Testing
• Gcih
• Gwapt
• Ccnp
• Information Security Management