KRISHNAKUMAR M S

Working as L3 Data Protection Engineer by configuring and maintaining various DLP tools for Network, Endpoint and storage repositories.

Symantec Network DLP- Scans all outbound email and web traffic for sensitive information leaving the firm and either notifies, blocks or quarantines violations.

• Application Enhancements

- Drived Centralized logging activity by integrating Vontu with ESaaS (ELK Service)

- Involved in virtualization of email prevent servers.

- Applied maintenance patches and hotfixes rolled out by vendor and automated the upgrade using chef cookbooks.

• Risk and Control Contributions

- Remediated vulnerabilities spanning to categories like Log4j, windows OS, HSTS, Apache common text, OOXML etc.

- Disabled weak authentication protocols.

- Removed unused system and user accounts from estate.

• BAU

- Application health monitoring and maintenance.

- Disaster Recovery activities.

Symantec DLP Data At Rest- Scans

• Application Enhancements

- Built DEV environment from scratch

- Integrated DLP DAR Dev environment with ESaaS to ingest incidents for bulk encryption.

- Applied maintenance patches and hotfixes rolled out by vendor and automated the upgrade using chef cookbooks.

• Risk and Control Contributions

- Remediated vulnerabilities spanning to categories like Log4j, windows OS, HSTS, Apache common text, OOXML etc.

- Disabled weak authentication protocols.

- Removed unused system and user accounts from estate.

• BAU

- Application health monitoring and maintenance.

- Detection server optimizations.

- Scan management or load balancing.

- Filter onboarding and removal of decommissioned targets.

Symantec Endpoint DLP- Scans all removable medias for sensitive information leaving the firm and either notifies, blocks or quarantines violations.

• Application Enhancements

- Involved in in-place windows OS Upgrade of infrastructure to meet compliance.

- Applied maintenance patches and hotfixes rolled out by vendor and automated the upgrade using chef cookbooks.

• Risk and Control Contributions

- Remediated vulnerabilities spanning to categories like Log4j, windows OS, HSTS, Apache common text, OOXML etc.

- Disabled weak authentication protocols.

- Moved system accounts using for application to a managed safe for automatic password rotation and for better management.

- Removed unused system and user accounts from estate.

• BAU

- Application health monitoring and maintenance.

- Disaster Recovery activities.

Worked as L2 DLP Operations Analyst by configuring and maintaining various DLP tools for Network, Endpoint.

Technologies and Tools :

Symantec DLP, ServiceNow, SSRS, Oracle SQL Developer, CyberArk

Application Maintenance/ BAU

- Managing and providing L2 support on Symantec DLP

- Helping Local IT teams in troubleshooting DLP issues on non-compliant or not reporting agents using Microsoft Remote Assistance tool.

- Troubleshooting DLP issues in agents using agent log analysis.

- Creating reports based on incidents, policy violations and highest offenders using Microsoft SQL Server Reporting Service (SSRS).

L

- Providing guidance, recommendations and best practices for DLP operations. Providing guidance, recommendations and best practices for DLP operations.

- Assisting DLP platform upgrades, installations and configurations in clients.

- Monitoring application and server health status using Geneos monitoring tool.

- Configuring DLP policies as per business process requirement.

- Providing point of contact and hands -on escalation and remediation for critical issues.

- Communicating relevant technical information and alerts on known issues, hot fixes and new releases.