NAGENDRA BABU G

Project: Molina Healthcare (healthcare insurance).

Description:

Worked with U.S.-based clients, including Molina Healthcare (healthcare insurance). Implemented and managed McAfee Endpoint DLP and Microsoft Purview DLP to protect Protected Health Information (PHI) across Exchange, SharePoint, Teams, and endpoints, ensuring HIPAA compliance.

Responsibilities:

• Deployed and configured McAfee Endpoint DLP, Symantec DLP, and Microsoft Purview DLP solutions.
• Created, migrated, and fine-tuned DLP policies across Microsoft 365 (Exchange, SharePoint, Teams, OneDrive).
• Built rules, rulesets, and dictionaries for sensitive data detection.
• Reduced false positives by continuously fine-tuning and testing policies.
• Performed risk assessments and implemented corrective measures for data security gaps.
• Prepared and shared DLP documentation for client reference and compliance needs.
• Assisted in policy migration from legacy systems to Microsoft Purview DLP, using the migration wizard.
• Educated and guided team members on DLP capabilities, preparing reference documentation.
• Designed end-user notification templates and awareness campaigns to reduce policy violations.
• Ensured DLP compliance with HIPAA and other industry regulations, minimizing audit risks.

Project: Northwestern Mutual (financial and insurance services).

Description:

Worked in the Security Operations Center (SOC) using Splunk, Microsoft Sentinel, Microsoft Defender, and Zscaler to investigate, escalate, and remediate phishing, malware, and intrusion-related alerts. Ensured compliance with PCI-DSS and SOX requirements.

Responsibilities:

• Monitored and investigated security alerts generated in Splunk and Microsoft Sentinel.
• Conducted IOC-based investigations (URLs, hashes, IPs, and domains).
• Analyzed phishing and spam incidents, including email headers and attachments.
• Used Microsoft Defender for Endpoint and Zscaler to detect and contain malware, suspicious access, and cloud threats.
• Escalated critical incidents per SLA to L3 and Client SOC teams.
• Generated weekly and monthly SOC reports for client management.