Tanuja Verma

About Tanuja Verma

US citizen, Public trust clearnce for Govt agencies, DoD IT-I (Standard) Unclassified)- Over 15 years of experience in Cyber security, assurance and risk management- created a blueprint to transform from traditional vulnerability management program to Attack surface management program- Led Security Engineering team responsible for managing and maturing full suite of critical cyber security tools to support security monitoring, incident response and cyber threat intelligence in AWS environment and on-prem environments- Directly engaged with ISSO/ISSM to provide advisory and technical expertise and to devise security strategies and manage security initiatives- Expertise in implementing Akamai web firewall to protect against Web (OWASP), DDoS and Bot attacks protecting valuable client data- Led Security assessment and remediation efforts for varied regulatory regulations (FEDRAMP, NIST 800-53, SOX-404,and Data Privacy), which resulted in 100% compliance and ensured continued operations allowing client to win additional contracts- Led implementation of NIST 800-53 Information security controls for a CLOUD based web application covering full development lifecycle- Implemented vulnerability management program.

Experience

1. Senior Security Manager

   GovCIO

   Oct 2024 — Present

Education

• Devi Ahilya Vishwavidyalaya

  Masters in Computer Applications

  1989 — 1992

Skills

• Application Security Assessments
• Threat & Vulnerability Management
• Cloud Security
• Client Relations
• Itil
• Information Technology
• Data Privacy
• Arcsight
• Threat Intelligence
• Web Application Security
• Internal Audit
• IT Security Controls
• Security Architecture Design
• Fisma
• Log Management
• Web Application Firewall
• Project Management
• Database Security
• Akamai
• Agile Project Management
• Siem
• IT Compliance (Federal and Commercial)
• Network Security
• Splunk
• IT Risk Management
• Nist 800-53
• Infrastructure Security
• Sarbanes-Oxley Act
• Data Privacy and Governance