Jul 2022 – Feb 2023 · 7 mos · Mumbai, Maharashtra, India · On-site

• Responsible for handling all cybersecurity operation of SBI Caps.
• Working directly with SBI Capital CISO.
• Track and maintain & work on KPI’s and KRI’s.
• Prepare a audit plan and track on-time delivery of cybersecurity activities and audits.
• Participate and coordinate in cybersecurity audit.
• Conduct awareness training, Phishing drill.
• Co-ordinate between vendors, IT team to get cyber security activities done.
• Suggest compensating control for vulnerabilities observed in VA/PT to reduce risk.
• Review of all cyber security activity report like internal VA, PT, firewall ruleset, APT etc. and provide final approval on same.
• Prepare and maintain Policy and procedure.
• Monitor and track SOC alert and follow up with IT team for closure.
• Prepare PowerBI visual dashboard for Board meetings.
• Maintain and track all cybersecurity operations.
• Responsible for monitoring DLP event.
• Responsible for raising incidents and finding root cause.
• Provide technical & suggestions help to IT team.

Jan 2022 – Jul 2022 · 6 mos · Mumbai, Maharashtra, India · On-site

• 1. Responsible for performing application architecture review, network architecture review for middle east government projects.
• 2. Responsible for performing internal Vulnerability assessment and penetration testing.
• 3. Responsible for performing web application penetration testing.
• 4. Create Visual report using PowerBI for final presentation.
• 5. Knowledge of PowerBI.

Jun 2021 – Jan 2022 · 7 mos · Pune Division, Maharashtra, India · On-site

• Worked in Secure by Design operation.
• Responsible for performing risk assessment of firewall assurance.
• Review network architecture diagram to ensure compliance with Vodafone standard.

Aug 2018 – May 2021 · 2 yrs 9 mos · Mumbai, Maharashtra, India · On-site

• Working as a PCI QSA to perform PCI DSS audit.
• Responsible for performing audit and ensuring compliance of client from start to end certification cycle of PCIDSS.
• Detailed knowledge of PCIDSS, PADSS controls and compliance.
• ROC writing experience.
• Performed onsite assessment of banks, BPO's and data centers.
• Performed evidence collection, validation and ROC writing.

Apr 2016 – Aug 2018 · 2 yrs 4 mos · Mumbai, Maharashtra, India · On-site

• Performed offsite assessment for banks, Payment gateways, Payment aggregator, BPO's and data center.
• Detail knowledge of PCI DSS requirement and controls (3.2.1)
• Responsible for performing QA to ensure scoping of client is as per PCIDSS.
• Responsible for performing QA to ensure provided evidence as per PCI DSS standard.
• Responsible for validating audit evidence as per PCIDSS standard.
• Responsible for writing ROC for PCI DSS.
• Performed Onsite audit for PADSS ( payment application data center security standard )
• Performed technical audit of PADSS to find trace of cleartext SAD (Sensitive authentication data).
• Detailed knowledge of PADSS standard.
• Detailed knowledge of key management and encryption.
• Detailed knowledge of CIS benchmark.

Sep 2015 – Apr 2016 · 7 mos · Mumbai, Maharashtra, India · On-site

• Responsible for performing network penetration testing & web application penetration testing from internal and external perspective.
• Conduct application penetration testing (OWASP & functional flaws).
• Responsible for performing firewall ruleset review to ensure firewall compliance.
• Responsible for performing segmentation testing to ensure PCI segmentation.
• Recommend compensating control to lower down risk.
• Experience of using Nessus, Nexpose, Burp, Kali Linux and other tools.