Yash Ware

About Yash Ware

I am a cybersecurity professional specializing in Vulnerability management, data security, and risk assessment. With extensive experience using Qualys, I excel in monitoring web traffic, managing vulnerabilities, and mitigating security risks.Key Skills:* Data Security: Ensuring the protection of sensitive information.*Vulnerability Management: Utilizing Qualys for effective risk mitigation.*Risk Assessment: Conducting thorough assessments and implementing mitigation strategies.*Vulnerability Prioritization: Using QDS, CVE, CVSS, and asset criticality to address critical issues.* Data Analytics & Reporting: Analyzing security data and generating actionable reports.

Experience

1. Cyber Security Analyst

   Deloitte

   Apr 2022 — Present · Hyderabad, IN

   Vulnerability Assessment: Executed asset scans with Qualys to detect vulnerabilities efficiently.• Risk Analysis: Evaluated vulnerabilities using QDS, CVSS, and true risk scores to prioritize fixes.• Collaboration for Mitigation: Guided application and asset owners on vulnerability mitigation.• Patch Management: Worked with teams to ensure timely patching and compliance with security standards.• Asset Management with ServiceNow: Utilized ServiceNow CMDB for asset management and process automation to enhance IT operations.• Security Monitoring: Monitored critical vulnerabilities using CrowdStrike, ensuring rapid incident response.• Compliance Assurance: Maintained security awareness programs to meet regulatory and compliance standards. Familiarity with frameworks and standards, such as NIST and ISO 27001, ensuring compliance and robust security measures.• Security Strategy Execution: Partnered with leadership to implement strategic security initiatives.• Data Security: Leveraged the Netskope platform to develop and manage robust policies for monitoring web traffic and ensuring data security.• Data Loss Prevention (DLP) and Cloud Security: Formulated and enforced DLP and Cloud Access Security Broker (CASB) policies to safeguard sensitive information across cloud applications.• Website Access Control: Executed exception handling for websites, customizing access permissions to bolster organizational security measures.• Security Awareness and Phishing Simulation: Employed MJML to create targeted internal phishing emails, conducting security awareness training and vulnerability assessments.

Education

• Shri surya sagar digamber jain higher secondary school Ujjain(MP)

  High school

• Rajiv Gandhi Prodyogiki Vishwavidyalaya

  Bachelor of Engineering, Mechanical Engineering

  2014 — 2018

• Govt.maharajwada Ujjain(MP)

  Higher secondary school, Physics/chemistry/mathematics