Ravi Kammili

Security Remediation Initiative

- Guide and assist in architecting a multi-tier network, supplemented with network segmentation to improve access controls and reduce threat surface

- Review application design for information security standards and assist development teams in sound security framework

- Document, prioritize, and analyze security threats, incidents and key metrics.

- Champion Annual SSAE16 audit process.

- Periodically review, re-certify, and update company policies, standards and specifications to ensure compliant, effective data management with clients and external vendors

Vulnerability Management

- Manage and maintain vulnerability scanning and reporting as part of the overall vulnerability and patch management process.

- Responsible for detecting and tracking vulnerabilities through the vulnerability life cycle, consulting with internal teams and business units to, assess threats, associated risks and remediate accordingly.
- Prepare comprehensive, customized reports based on risk ratings of vulnerabilities, severity and business impact. Present findings and propose countermeasures to senior technology executives.
Application Whitelisting

- Lead the planning, implementation and management of application whitelisting solution across all enterprise workstations to better prevent, detect and respond to malware and advanced threats.

SIEM Monitoring

- Used AlienVault USM to aggregate data from multiple sources, including Host/Network IDSs, and SNMP traps to consolidate monitored data to help avoid missing crucial events.
- Automated the gathering of compliance data, producing reports that adapt to existing security, governance, and auditing processes.

Network Engineering
- Designed and implemented secure infrastructure solutions, including firewalls, IDS/IPS, SIEM infrastructure, vulnerability scanning tools, VPN, load-balancing systems and other tools.
- Managed Checkpoint firewall and BlueCoat products by establishing and enforcing policies; Responsible for defining and monitoring and auditing access controls.
- Installed, configured and maintained VMware ESXi environments. Experienced with vCenter, DRS, HA, vMotion

Currently in Progress