Premchand Yadav
Sr.Lead Engineer -Risk & Compliance
Mumbai
Summary
Security Professional IT professional with 14+ years of experience managing and implementing security solutions in fast-paced environments with updated technologies and able to deliver exceptional confidence to clients
Overview
15
15
years of professional experience
10
10
Certifications
Work History
Sr Lead Engineer-Risk & Compliance
OLAM INFORMATION SERVICES PRIVATE LIMITED
Mumbai
07.2020 - Current
- Develop and implement security policies, standards, and procedures
- Performing initial security assessments and services planning with the customer
- Identify potential threats and respond promptly
- Perform risk assessments to identify vulnerabilities in networks
- Monitoring data leak on dark web and taking the appropriate action
- Help internal product teams architect solutions securely and ensure designs meet security policy and standards
- Monitor compliance with security policies
- Proven skills in network and system security and design, management, monitoring, incident response
- Possess a deep understanding of operations and network security and common security weaknesses
- Reviewing and preparing the SCD for all devices
- Conducting Firewall rule base audit
- Identified and evaluated potential threats and vulnerabilities through VA and work with App owner for closing to protect from threats
- Performed security assessment of Zcaler proxy, Email gateway, cloudstrike,DLP and VPN and finding shared with management
- Performed NSR of the DC and DR network
- Research the latest security trends
- Knowledge of network architecture, operating systems, firewalls, encryption technologies, authentication protocols, vulnerability assessment tool etc
Manger
Sun Pharmaceutical Industries Ltd
Mumbai
12.2019 - 06.2020
- Responsible for 24x7 Security Operation Center
- Monitoring data leak on dark web and taking the appropriate action
- Reviewing and preparing the SCD for all devices
- Conducting Firewall rule base audit
- Configuring the decoy on smoke screen to identify the threats
- Administer company information security testing and protection plans
- Identified and evaluated potential threats and vulnerabilities through VA Appsec and PT and work with App owner for closing to protect from threats
- Make recommendations for mitigating identified risks
- Monitored live systems to discover real-time threats
- Demonstrated effectiveness of security controls
- Performed risk assessments to help create optimal prevention and management plans
- Analyze reports to understand threat campaign(s) techniques, lateral movements and extract indicators of compromise (IOCs)
- Maintain situational awareness of cyber activity for new vulnerabilities, malware, or other threats that have the potential to impact the organization
- Perform cyber threat intelligence analysis, correlate actionable security events, perform network traffic analysis using raw packet data, net flow, IDS, IPS, and custom sensor output as it pertains to the cyber security of communication networks, and participate in the coordination of resources during incident response efforts
- Coordinate resources during enterprise incident response efforts, driving incidents to timely and complete resolution.
Sr. Manger
Yes Bank Limited
Mumbai
03.2018 - 12.2019
- Plan, organize, and manage infrastructure staff and/or consultants to ensure the stable and secure operation of the organization's IT infrastructure
- Developing, maintaining, supporting, and optimizing key functional areas, particularly network security & cyber security infrastructure
- Coordinates with other departments in order to understand and meet their requirements
- Evaluate hardware and software requirements and capabilities and makes recommendations
- Checks systems in order to optimize performance and to initiate recovery action after system failures
- Monitors service and maintain stability, collect and analyze utilization, and installs and tests software upgrades
- Develops, maintains and tests disaster recovery plans
- Evaluate security requirement, perform POC and take project to closure
- Representing Yes Bank in all audits like Internal, External & RBI.
Team Leader
IBM India Pvt Ltd, BKC
Mumbai
03.2017 - 03.2018
- Management of information security infrastructure, Configured with fault tolerant and with high availability
- Product evaluation, troubleshooting and implementation of all security products
- Closing the vulnerability related to the Security infrastructure
- Communicate security and compliance issues in an effective and appropriate manner to Customers
- Provide technical leadership for security strategy
- Performing the BCP drill for banking application.
- Ability to update skills and knowledge relating to future trends in industry standards
- Responsible for compliance to security processes, standards and related requirements
- Responsible to maintain and troubleshoot network security infrastructure of Reliance
- Executed critical activities related to firewalls
- Responsible for managing & supporting the core IT Infrastructure security devices like IPS, Imperva WAF
- Develop & Implement IT Strategy in line with corporate strategy
- Provision of pro-active security solutions in support of Business Process Improvements
- Develop strategic plans & implement the objectives of the IT needs of the company to ensure the computing capabilities are responsive to the needs of the company's growth & objectives
- Handling the Escalation of Customer.
Team Leader
Reliance Comm Infra Ltd, Kopar Khairane
Mumbai
07.2014 - 11.2016
- Management of information security infrastructure, which comprises, 75 Firewalls with various flavors like Netscreen (NS 50, NS 500, ISG-1000, ISG 2000) SSG( SSG 140, SSG530) and Cisco PIX (PIX 515E, PIX 525, PIX 535,Cisco-ASA), Fortigate 60, IPS (G1200 , G2000) Palo-Alto(PA-3050)configured with fault tolerant and with high availability
- Assist in Audit, policy management, patch management and incident management activities
- Product evaluation, troubleshooting and implementation of all security products
- Maintain information security technologies as per corporate policies
- Responded to information security incidents as needed
- Communicate security and compliance issues in an effective and appropriate manner to Customers
- Provide technical leadership for security strategy
- Ability to update skills and knowledge relating to future trends in industry standards
- Responsible for compliance to security processes, standards and related requirements
- Responsible to maintain and troubleshoot network security infrastructure of Reliance
- Executed critical activities related to firewalls
- Responsible for managing & supporting the core IT Infrastructure security devices like IPS, Imperva WAF
- Develop & Implement IT Strategy in line with corporate strategy
- Provision of pro-active security solutions in support of Business Process Improvements
- Develop strategic plans & implement the objectives of the IT needs of the company to ensure the computing capabilities are responsive to the needs of the company's growth & objectives
- Windows patching through WSUS.
Senior Security Engineer
Wipro InfoTech Ltd, HDFC Bank LTD
MUMBAI
09.2010 - 07.2014
- Responsible for tabulating the daily checklist which describes the health status, Utilization, stability of the security devices
- Provide solution to customer network issues when incidents are raised
- Introduce new VPN setup between client and their partners
- Troubleshoot various issues related to security part of the network
- Upgrade gateway & management server
- To Configure Network Address translation static and Hide NAT
- To check the existing Rule base and to add, delete or modify the rules according to the requirement of the clients
- To configure IPsec VPN connectivity and troubleshoot if there is any issue
- Management and Administration of DRM (Data rights management) solution
- Management and Administration of Imperva Web Application Firewalls
- Analysis on WAF operations, Attacks / Vulnerabilities in Web Applications and present analysis to relevant teams
- Review of Vulnerability Assessment / Penetration testing reports and follow up on closure of the same
- Maintaining documentation of project data, plan, progress, issues, resolution, risks, task Completion
- Implemented and Configured McAfee Web Gateway v7.1
System security Engineer
Wipro InfoTech Ltd, Embee software pvt ltd & IT solutions pvt ltd, HDFC Bank LTD
MUMBAI
10.2007 - 09.2010
- Installing, Managing and monitoring Symantec Endpoint console on Primary & Secondary Site
- Installation, maintenance & administrations of Symantec Live update server
- Implementation of Policies, SNAC (Symantec Network Access Control)
- End to End Coordination with Principle Vendor regarding Product related issues
- Working on basic troubleshooting & assessment on viruses in organization and efficiently handling virus attacks at critical times
- Process Documentation & Version control based on ITIL framework
- Participating in system Security audits, Weekly Reviews & Presenting Monthly Executive Summary to Cluster Head
- Performing POC and create case studies of new versions of Symantec Endpoint and compliance related products
- Professional Qualification
Education
BSC - IT
Mumbai University
Diploma - Computer Engineering
MSBTE
Skills
Firewalls: Cisco ASA, Checkpoint, Juniper, Fortigate, Paloalto
IPS/IDS: IBM , Mcafee
Content Filtering: McAfee Web Gateway and Blue coat,Zscaler
SSL VPN: Juniper SSL VPN
Two Factor Auth: RSA
Mail Gateways: Symantec Mail security
NAC: Navis NAC
WAF: Imperva & Akamai
PAM: Arcos
DRM: Seclore
AV : Symantec End point protection, Cloudstrike
Certification
V3 Certified
Timeline
Sr Lead Engineer-Risk & Compliance
OLAM INFORMATION SERVICES PRIVATE LIMITED
07.2020 - Current
Manger
Sun Pharmaceutical Industries Ltd
12.2019 - 06.2020
Sr. Manger
Yes Bank Limited
03.2018 - 12.2019
Team Leader
IBM India Pvt Ltd, BKC
03.2017 - 03.2018
Team Leader
Reliance Comm Infra Ltd, Kopar Khairane
07.2014 - 11.2016
Senior Security Engineer
Wipro InfoTech Ltd, HDFC Bank LTD
09.2010 - 07.2014
System security Engineer
Wipro InfoTech Ltd, Embee software pvt ltd & IT solutions pvt ltd, HDFC Bank LTD
10.2007 - 09.2010
BSC - IT
Mumbai University
Diploma - Computer Engineering
MSBTE