Vignesh Km

Security Engineer

Reputation.com•  August 2021 - Present

As a Security Engineer, I was responsible for the whole security operations of my current organisation, i have worked on improving and maintaining the complete security posture of the organisation. Web Application Security: - Worked as a member of DevSecOps and perform secure code review SAST, Dependency vulnerability check and Open source vulnerability check before pushing it to production. - Performed periodical Vulnerability Assessments for Web Applications and collaborated with developer teams to continually improve the security posture of the application. - Continuously monitor traffic between Kubernetes containers and deployed policies to enforce the security posture of the GKE. - As a Red Team member performed penetration testing for both web applications and Cloud infrastructure. Hands-on: DAST, SAST, Qualys, Sonarcloud, Burpsuit, Kali Linux, Jenkins, Saas, WAF(Neuvector), Kubernetes. Cloud Security: - Continuously monitor and detect anomalies in the cloud infrastructure. - Performed periodic vulnerability assessment and penetration testing for the Google cloud infrastructure. - Implemented CASB for the current organisation to improve the security posture of cloud access. - Worked on Google Security Command Centre to continuously monitor anomalies and misconfigurations in Google cloud. - Designed and implemented runbooks for cloud incident response plans. Hands-on: Google Cloud, Cloud armour, CASB, IAM, Security Command Center(Google), SIEM. Endpoint and IT Security: - Designed and deployed Endpoint Antivirus, EDR, and DLP system management. - Collaborating with business IT teams to continually improve the security posture of their application and security portfolios. - Perform periodic scans for Endpoint systems, and data centre components and fix them. Hands-on: SentinelOne, Secure Web Gateway, Cloud Directory(JumpCloud)

Security Analyst

Tata Consultancy Services•  August 2018 - August 2021

- As a Security Analyst I was responsible for delivering the Cisco Advanced Services portfolio in the area of Security Services, which includes Advisory, Implementation services, in customer environments including Enterprise and Service provider areas. - Worked on CVEs found in Cisco Firewall devices and created a report for the respective team to fix it. - Perform Vulnerability Assessment for Cisco Security devices and send reports to respective teams to fix them. - Provides guidance and oversight to team members giving technical support for customers during Migration windows and deliverables preparation. - Closely working with the customer planning & operations team within Cisco, Solutions Architects, other consulting engineers, product specialists and Project managers. - Developing Python Automation scripts and implementing them during the Migration windows. Drafted training materials and organized training sessions for new employees.