Technology Security Senior Analyst
ACCENTURE
Total years of experience :10 years, 6 Months
Focused on intrusion detection/security monitoring and analysis.
•Fulfilling B2B VPN, IT Consultation, DMZ & Firewall port opening requests.
•Responsible for completing & managing new projects. Create and maintain logs, records, diagrams, and reports of all network systems
•Handling & troubleshoot Incident tickets.
•Mentoring L1 & L2 team.
•Strong troubleshooting skills with the ability of dynamic to solve complex technical issues with customers and partners
•Responsible for troubleshooting, upgradation and installation of Palo Alto
•Migrating EOL devices to next generation from ASA to Palo Alto, Checkpoint etc.
•Gathering intelligence (e.g., network and domain names, mail server) to better understand how a target works and its potential vulnerabilities.
•HIP profiles—configuring HIP profiles on Palo Alto for GP VPN to be evaluated together either for monitoring or for Security policy enforcement
•Mitigate of detected security vulnerabilities creating custom profile in case traffic is legitimate.
Excellent understanding of OWASP TOP 10 Risks, vulnerabilities and Mitigation Mechanisms.
•Solve existing security issues, such as viruses or hardware malfunctionCreating virus detection rules on firewall.
•Investigating security breech alerts
•Create and maintain security policies
•Develop authentication and authorization protocols
•Maintaining virtual private networks, firewalls and web protocols, security and program.
•Working on Proxy & troubleshoot Zscaler issues.
•Troubleshooting RSA & MFA issues.
•Responsible for managing Wipro infrastructure security globally.
•Responsible for troubleshooting, upgradation and installation or HOTFIX on (Palo Alto, Checkpoint, Fortigate, Cisco ASA).
•Responsible for managing ALGOSEC Firewall Analyzer automates and simplifies security operations including troubleshooting, auditing, and risk analysis optimize the configuration of firewalls, routers, web proxies, and related network infrastructure to ensure security and compliance.
•Responsible for Monitoring & troubleshooting on F5-WAF issues.
•Implementing & troubleshooting HIP profiles for C2S VPN users in order to user systems meet posturing requirement
•Configuration and troubleshooting of Site to Site (IP-SEC) VPN on all firewalls
•L2/L3 level of expertise in threat/incident containment, RCA and eradication.
•Escalation contact for L1 team assisting with resolutions.
•Suggest clients in designing and improving their network's security.
•Handling and resolving high priority and critical issues with Firewalls.
•Experience troubleshooting issues in Windows PowerShell & Linux
•Creating rules & subscriptions in Azure cloud
•Expertise in TCP Dump, Packet capture & Tracer, FWmonitor, Analyzing .pcap files in Wireshark
•Troubleshooting all management and traffic issues to and through firewall.
•Experience in exploiting web services security vulnerabilities including cross-site scripting, SQL injection, DOS & DDOS attack.
Working with International Client ( U.S Macy's)
•Handle WEB Application Firewall, Palo Alto firewall PA-5K series &Panorama (M-500)
➢Designing, configuration & Implementation of Palo alto Firewall.
•Configuration& Troubleshooting of Policies, Nat/Pat, High-Availability (A/P), IP-Sec & Global-Protect Vpn.
•Responsible for implementing the change requests by following the change management process
•Responsible for handling incidents, troubleshooting and resolving the issues on time
•Attending capacity management and load test meetings by analyzing and collecting performance data of security devices by various aspects like memory, CPU, throughput etc.
•Identifying the flaws in the configuration and taking corrective and preventive actions by creating SOP
•Coordinating with users for change requests with incomplete or inappropriate data quickly able to point the requester in right direction
•Generating reports from Firemon tool for redundant rules and then work on rule base optimization by labelling, disabling, monitoring and then deleting the disabled rules to enhance firewall performance
•Responsible for firmware upgrades.
Responsible for managing customer infrastructure security devices - Firewall, Proxy, Email Gateway.
•Configuration and troubleshooting of VPN (IPsec Site-to-Site VPN, Remote access VPN, Any Connect /Clientless SSL VPN, DMVPN
•Configuring and troubleshooting of context Firewall
•Configuring and troubleshooting Transparent Firewall
•Configuring and troubleshooting of Failover ( Active/active and active/standby) firewall
•Configuration and troubleshooting of Cisco ASA Firewall device for Static & Dynamic NAT/PAT, policy NAT, Access control list.
•Configuring Reflexive, CBAC, Zone based firewall
•AAA Authentication through TACAACS+, RADIUS
•Configuring and Troubleshooting Catalyst Switches (2900, 3500) for STP issues, VLANS, VTP, Trunking, Port Security, DHCP Spoofing, IP Source Guard, ARP spoofing,
•Configuration and Troubleshooting of Cisco Routers (2800, 2900) for Routing
•Static, EIGRP, RIP and OSPF.
•IOS up gradation and Backup of Cisco Routers, Switches and Firewalls.
•Responsible for solving all Network related issues in Routing, Switching and Security.
•Installing and Configuring Checkpoint Firewall and implementing policies.
•Implementing and troubleshooting source and destination on checkpoint.
•Working on active directory, RSA secure ID
•Monitoring Networking devices alerts through ITSM and Envision.
•Work assigned as per SLA.
Providing hardware / software / network problem diagnosis resolution via telephone
•Installation, Configuration, and troubleshooting Elastix VOIP server.
•Adding SIP accounts.
•Installation of Windows Vista and windows 7/8.1, Configuration, Troubleshooting.
•Handling No Internet Connection of Home US Based Users
•Using Service now tools and handling tickets on it
•Analyse, acknowledge & record each & every alert in the monitoring tools & handle the alerts as per their impact
•Participate in on-going training and departmental development
•Escalate complex problem to appropriate support specialists
URL removed due to policy violation. Please contact support for further information.