Global Security Operation - Network Security Change Analyst
NITYO INFOTECH
مجموع سنوات الخبرة :3 years, 1 أشهر
NITYO INFOTECH - CITI July 2013 - Present
PBCOM Tower 28th Floor, Ayala Avenue, Makati City
Global Security Operation - Network Security Change Analyst
Change Reconciliation Operation
• Perform Change Auditing on below platforms: * Juniper Firewall
* Cisco Devices
* RAS VPN
* Tarantella Servers
* Palo Alto Devices
* Technology Infrastructure Scan
* Checkpoint Firewall
* HASI
* Bluecoat Proxy SG
• Tools available for Reconciliation process.
* HP Automation Tool (Automatic Configuration Backup)
* Network Security Manager (Juniper Network)
* Checkpoint Smart Dashboard
* Checkpoint Smart View Tracker
* Checkpoint Smart View Monitoring
* Palo Alto Network Manager
* Command Line Interface on actual devices (read-only access)
* Archer/ServiceNow/Virtual Change for ticketing system.
* Sharepoint inventory and ticket tracking for reports
• Groups part of Global Security Operation
* SOC (Security Operation Center)
* HASI (Host and Application Security Infrastructure)
* SSO (Single Sign-On)
* IAO (Information Assurance Operations)
* AVA (Application Vulnerability Assessment)
* IVA (Infrastructure Vulnerability Assessment)
* PSO (Perimeter Security Operations)
* SII (Security Event Management and Intrusion Detection)
* SECM (Security Event Content Management)
• Perform the process control compliance activities for the global security devices
• Perform reconciliation on all configuration changes for various GSO managed devices
• Perform Log Review and confirmation that all GSO-managed devices are reporting and escalate to management for any inconsistency on report.
• Provide evidence gathering for Risk and Control Self Assessments
• Raising compliance issues on deficiencies and performance to the relevant teams and/or team managers, and the action plans to resolve the issue.
• Interact with the Global teams to manage the timely execution and completion of compliance activities and remediation tasks
GSO Device Inventory Management
• Create and maintain inventory checking PCM (Process Control Management)
• Ensure that all Firewall and Checkpoint Devices are reporting.
• Perform daily check to ensure that there are no missing devices.
• Validate approved RFC (Request for Change) for newly deployed and decommissioned devices.
• Raise RFI (Request For Information) for any indiscretion on the inventory process
• Coordinate with PSO (Perimeter Security Operation) all related inventory issues and improvement on current process and management.
• Escalate to management for any unresolved Issue
GSO Security Operation
• Verify that all changes in the network is implemented correctly
• Verify that all changes was implemented on the approved time (Green Zone)
• Verify that all changes was approved by the managers prior to implementation
• Verify that all changes were successfully implemented on the devices using the tools available for reconciliation process.
• Send consolidated report of inventory and reconciliation to management of different platform for reviewing purposes.
• Secure proper blocking of websites in proxy to ensure only allowed website is accessible
• Report any suspicious activity seen on the network to concerned department
• Coordinate with different groups for related concern and issues.
GOLDEN RACKS BIZ CORPORATION March 2012 - June 2013
Timog Avenue, Quezon City
Information Technology - Technical Support
Network Administration
• Design and Implement Network Infrastructure for small scale business
• Monitors, troubleshoots and maintains
o Network connectivity (LAN and Wireless)
o Network equipment (switches, hubs and WIFI routers)
o Hardware (Desktops, Laptops, Blackberry and Printers)
o Desktop technologies (Operating System, Windows, Remote access, and Desktop application)
IT Operation Management
• Facilitate and establish regular Project Review Meetings
• Serve as customer's single point of contact for all project related issues and concerns;
• Successfully lead, develop and communicate a common strategic direction; organize, analyze, and motivate the implementation team to help them meet their objectives and provide high-quality service;
• Ensure projects are completed on time and within budget.
• Function as the single point of contact for and owner of change requests
• Ensure that submitted change requests conform to established change policies, procedures, and standards
• Verify that changes are properly scheduled to ensure minimal impact to the production environment
Integreon Managed Solutions (Philippines), Inc. February 2011- March 2012
6750 Ayala Avenue, Makati City
Information Technology - Technical Support
Network Administration
• Design and Implementation of Network Infrastructure based on Hierarchical Internetworking Model
• Designing Data Center Rack Infrastructure, mounting CISCO Equipment, DELL Servers, HP Servers and IBM Servers, creating infrastructure zone and color coded cabling, documentation of port mapping.
• Configuring CISCO Network equipment and Nortel VOIP equipment.
• Implementation of Network Security (Perimeter Firewall using CISCO ASA 5500 Series, Website Blocking using Bluecoat ProxySG)
• Bandwidth Management and Monitoring using Packet shaper, monitor downtime, bandwidth peak and checking website accessed by users.
• Layer-3 Switching configuration, planning and implementation of different type of switching protocol like VTP, VLAN, RSTP and HSRP.
• Maintaining VPN connection (remote desktop/VOIP connection) for external client and troubleshooting VPN tunnel if problems occur.
• Monitoring Citrix performance degradation, finding root cause of higher latency and drop of packets.
• Planning proper allocation of bandwidth per delivery center usage
System & Storage Support
• Maintain Active Directory
• Back up file server daily and weekly.
• Maintaining Dell Powervault tape drive and change its tape weekly.
• Password reset, Mapping default Drive, Creating script and set User restriction per folder in Active Directory
• Creating and mounting snapshots for hourly backup.
• Analyzing Server logs for error events and disk failure.
Database Administration
• Create Database of Integreon IT Asset inventory using MS Access 2007
• Precisely consolidate IT Asset information.
• Create deployment process for better tracking of asset.
• Create report to inform the team of changes in Asset Information.
• Continues Checking of Asset Information to maintain accuracy of Database Information.
• Continues upgrading, enhancing, adding features on Integreon database and checking logs for changes.
IT Operation
• Oversee Data Network Infrastructure, continues maintenance of corporate and Operations
• Implementation of planned changes with change management process.
• Proper handover process of logged tickets via Integreon IT Log sheet
• Creating IT Asset Endorsement Process for IT Assets.
• Creating User Account Creation/Deletion Process for new and resigned associate.
• Create User Account tracking sheet to maintain associate record.
• Support associate in their computer related technical problems.
• Creating IT Process documentation for guides and processes.
• Oversee Deskside support team on daily task, on how to use IT Log sheet, how to support user from their technical concern, how to properly isolate the problem and troubleshooting guide and other IT basic technical concern.
Training for Cisco Academy Instructor • Describe how network works • Configure, verify and troubleshoot VLANs and interswitch communications • Implement an IP Addressing Scheme and IP Services to meet network requirements • Configure, verify and troubleshoot router operation and routing on Cisco Devices • Explain and select the appropriate administrative tasks required for a WLAN • Identify security threats to a network and describe methods to mitigate those threats • Implement, verify and troubleshoot NAT and ACLs in Enterprise branch office • Implement and verify WAN links
AMA Computer College - Makati Campus August 2010 - October 2010
AMA Computer College - Fairview Campus June 2006 - August 2010 Bachelor in Science in Information Technology