Sonika Kour

About Sonika Kour

At Columbia Bank NJ, my role as a Security Engineer enables me to leverage my cybersecurity knowledge to ensure the integrity and confidentiality of our client data. Specializing in vulnerability assessment and risk management, I develop comprehensive remediation strategies that align with organizational objectives. My expertise in Syslog, VMware, and Tcpdump permits a nuanced approach to security challenges, fostering a robust defense against potential threats.The bank benefits from my collaborative mindset as I work alongside IT departments, evaluating risk and documenting vulnerabilities. This cross-functional engagement culminates in the creation of a dynamic database for remediation guidelines. My dedication to upholding cybersecurity standards is further reflected in my commitment to aligning configurations with CIS standards, ensuring a proactive stance on cyber hygiene.

Experience

1. Security Engineer i

   Columbia Bank New Jersey

   Mar 2023 — Present · Fair Lawn, NJ, US

   Performed product assessment & threat modeling of the application while assessing the risk and considering the objectives and parameters of the organization.• Perform vulnerability assessment, evaluate risk, and provide remediation advice that will be put into practice.• Collaborate cross-functionally with other IT departments; assess and document the possibility and consequences of vulnerabilities, as well as the corresponding corrective action plans.• Created a database of common results and remediation guidelines and evaluated the risk of discoveries from regular vulnerability scans in real time.• Responsible for cyber hygiene that is configuration management and make it standard with CIS standards and guidelines. Change any relevant policies and standards across the network to standardize it with CIS guidelines.• Implement information security controls and patterns that support risk assessments and the development of secure architectures.• Responsible for working with IT on patch Tuesday’s every month to resolve vulnerabilities and any zero-days that comes in. • Created multiple metrics on vulnerability management that keeps track of all vulnerabilities from Nessus, Defender, EPSS and KEV and prioritize them based on the formulas calculated.

Education

• Osmania University

  Bachelor's degree, BSc (MSCs)

  2009 — 2012

• University of Houston

  Master's degree, Cyber security