System Security Lead
Claysys Technologies
Penetration Testing
Conducted web application penetration testing across multiple client and internal applications using industry-standard security tools and OWASP-aligned testing methodologies.
Vulnerability Assessment & Management
Conducted vulnerability assessments across multiple data centers and servers using Tenable Nessus and Rapid7. Analyzed and validated vulnerabilities, prepared risk-based remediation recommendations, and coordinated remediation activities.
Endpoint Security
Managed endpoint security operations using SentinelOne and Trend Micro, including agent deployment, policy management, monitoring, alert investigation, threat analysis, and response actions. Leveraged XDR capabilities for deeper investigation of suspicious processes, endpoint activities, and threat indicators.
Email Security
Managed Microsoft 365 email security operations by monitoring and investigating quarantined and user-reported emails. Identified phishing, spam, and malicious content and performed appropriate response actions.
Microsoft Security Controls
Implemented and managed Microsoft 365 security controls including tenant and user onboarding, license assignment, security policies, Microsoft Secure Score recommendations, DLP, sensitivity labels, and restrictions for unmanaged devices.
Incident Response
Handled security incident response and investigations involving phishing, malicious links, suspicious applications, and endpoint threats. Performed containment, threat analysis, and remediation while coordinating with relevant teams.
Security Awareness & ISMS Training
Conducted security awareness and phishing simulation campaigns, evaluated user responses, identified awareness gaps, and delivered targeted security training. Conducted ISMS awareness sessions for new joiners.
Client Services
Managed security services for multiple clients by coordinating security activities, communicating security findings and recommendations, preparing security reports, addressing client queries, and coordinating remediation activities.
