Libin Chandy , benfleet, United Kingdom

Working with the Cyber and Network Security Teams on various ongoing projects along with Design, Support, Maintenance,
Troubleshoot & resolve various technical issues daily
 Deal with Security Incident Management (SIEM) using tools like SKY-Security, Splunk, Firepower intrusion event Management systems
 Ensure the systems are up to date and taking proactive measurements to stop any Security vulnerability or malware attacks
 Working with SKYBOX Security Manager to achieve industrial standard Firewall and Network Assurances, Vulnerability Management
 Using Sophos Enterprise Console (SEC)- Endpoint and Server Protection Manager, define real time End point policies and protections.
SEC works includes defining and managing different End point protection policies like Web control, Anti-Virus and HIPS, Data Control.
 Managing Proxies and Application/URL filtering polices; define and apply Threat prevention (AntiBot/AntiVirus/ Malware) policies
 Reviewing the Intrusion Detection and prevention systems of the firm globally, upgrade the firmware and software modules
 Working with Cisco IPS Firepower Manager and SFR modules to define a consistent Global Intrusion detection and access policies
 Do Signature Analysis and Vulnerability analysis across the platform and take required actions as per vendor recommendations
 Generate Weekly and Monthly - Network Analysis and Risk Reports, Attack Risk, Malware Risk reports based on the real time data
from the IPS systems. Investigate and take further actions based on the reports and priorities to resolve various security issues
 Do Firewall and IPS changes using Change Control process on a regular basis to support different projects and resolve technical issues
 Working with Cisco ASA firewalls, standalone and Clusters – 5512,5516,5525, reviewing the rules and policies and make required
changes. Maintain and support Checkpoint Firewalls and proxies along with Smart Dash R75, R77, R80
 Working with Security Assessment, Asset and identity Security, communications and Network Security. Tenable’s NESSUS port
and vulnerability Scanning projects and taking proactive measurements against the external attacks and ransom wares across the domain
 Pro-actively monitor and filter security logs in the platform and analyzing the logs to take remedial action plans. Raise Emergency changes
to resolve any Major security incidents and breaches on the network.