Digantika Karchowdhury

1) Collaborate with the security architecture team to design and review enterprise
security frameworks.

2) Define requirements and prerequisites for new projects, with a focus on Data
Security.
3) Develop security guidelines and architectural overviews for initial project design
phases.
4) Evaluate and manage vendors, lead audits and ensure compliance according to the
requirements set by DESC, NESA, ISO etc.

5) Serve as the designated security representative on the Change Advisory Board
(CAB), exercising decision-making authority to approve or reject proposed changes
based on detailed risk assessments and security requirement fulfilment.

6) Assess vulnerability and penetration testing (VAPT) reports to coordinate mitigation
with application owners.

7) Conduct post-implementation reviews to validate the effectiveness of security
changes.
8) Led the data protection project, implementing Data Classification and Data Loss
Prevention (DLP) controls.
9) Have taken active part in SAP Rise migration project by assessing the required
security controls.
10)Done security assessments for SAP SuccessFactors and SAP Ariba modules
Implementation.

1) Managed enterprise DLP operations and continuous monitoring for data leakage
incidents.
2) Fine-tuned DLP policies and governed user access requests.
3) Administered Privileged Access Management (PAM) and conducted monthly/quarterly
User Access Reviews (UAR) across AD and applications.
4) Ensured endpoint compliance by auditing security agent installations.
5) Managed Information Security exceptions and asset management reviews and
implemented ISMS controls to manage information risks.

1) Orchestrated Phishing Triage and EDR management, including incident response and
hash blocking.
2) Implemented DMARC rules and monitored Email Authentication solutions to prevent
domain spoofing.
3) Conducted Technology Risk Assessments (TRA) for new solutions and maintained the
Corporate Risk Register.
4) Managed web proxy policies and IOC integration based on global security advisories.

Worked as a Resident Engineer, deputed onsite for a Government Client in Dubai.

1) Administered Zscaler proxy and TrendMicro Deep Security for 8, 000+ users.

2) Managed VMware Airwatch (MDM) enrolment and policy compliance.
3) Governed BeyondTrust PAM smart rules and monitored vulnerabilities using Tenable
Security.

1) Implemented Forcepoint Web, Email, and DLP solutions, configuring products based
on unique customer infrastructure needs.
2) Configured Fortinet Firewalls for client environments.
3) Performed Proof of Concepts (POCs) and health checks on deployed devices.
4) Delivered support and troubleshooting services as part of the Managed Services
Team.
5) Administered dedicated Forcepoint DLP environments for clients, managing servers,
appliances, policies, rules, and release gateways.
6) Conducted User Access Reviews (UARs) for firewall access applications.

1) Resolved complex issues related to Forcepoint (formerly Websense) and managed
global deployment projects.
2) Integrated RSA Envision SIEM with Forcepoint Gateways and Symantec MSS.

3) Configured Checkpoint Firewalls (Provisioning, rule bases, policy pushing, IPS
updates, VLAN creation, and upgrades) adhering to PCI standards.

4) Administered Juniper Firewalls, including rule base creation, VPN tunnel setup, and
SIEM integration.
5) Managed Cisco Meraki wireless controllers and performed IOS
upgrades/troubleshooting on Cisco routers and switches.

6) Executed BCP (Business Continuity Plan) and DR (Disaster Recovery) activities
across different regions.
7) Administered Blue Coat Packet Shaper, managing bandwidth allocation during peak
hours or specific activities.

8) Monitored alerts via SolarWinds and coordinated outage resolution/line ordering
with ISPs.

9) Conducted POC for Zscaler cloud application and managed procurement for
Forcepoint devices.

10)Utilized BeyondTrust and Arcos PAM tools for logging and user management.

->BAU Support
->Looking into Network and Security related issues and getting the issues resolved with minimum ETA
->Also I look after Websense Project Globally, and worked for its deployment within the current environment