Summary
Overview
Work History
Education
Skills
Knowledge Acquired
Timeline
Generic

Rohit Goel

Bengaluru

Summary

Experienced Information Technology Manager well-versed in infrastructure, security planning and daily operations management. Forward-thinking and strategic leader with 14 years of experience in Security Testing, Endpoint Protection and Information Security Industry. Recognized for cost-effective system improvements, operational streamlining and positive leadership style.

Overview

13
13
years of professional experience

Work History

Deputy General Manager - Security Testing

Vodafone India Services Private Limited
01.2022 - Current
  • Mentoring a team of Security Testers, responsible for assessing Vodafone's Security Posture and Threat Landscape
  • Provide recommendations basis the vulnerability assessments to proactively fill the gaps & enhance our security posture
  • Vulnerability & Risk Prioritization to minimize manual efforts to gain highest results
  • Monthly\Quarterly Reporting to present Vulnerability Management numbers for different entities with Org, and informed decision to drive activities that will help reduce our threat landscape
  • Liaising with stakeholders to gather requirements, approval, authorizations & accesses for Pentesting
  • Performing Management Reviews of Pentesting Reports before they are sent out to stakeholders to maintain high level of quality
  • Deciding authority in issuing Enterprise-wide Cyber Security Action Notices, as part of a workstream to proactively guide teams across geographies against zero-day threats
  • Generating efficiency using existing workforce and drive automation projects
  • Assist in defining the long-term Strategy for Security Testing Team
  • Identifying the Strategic tools for the enterprise & drive projects for implementation, governance & Reporting
  • Assist team that review Security feeds of top vendors & analyze the vulnerabilities to identify potential threats & drive mini projects to close compliance & Audit findings
  • Vulnerability Assessment results conducted via SAS platform, Qualys, are not the exact representation of the risk, must be assessed & prioritized for mitigation
  • Liaise with Business Relationship Manager (BRM) for service transition and handover
  • Drive projects to Develop, maintain & improve in-house created central reporting tool for stakeholders
  • Finding repeated tasks that can be automated to generate efficiencies
  • Mentoring Team members in their professional journey, guiding them in upskilling to help move to next level roles.

Senior Manager - Cyber Prevent

Vodafone India Services Private Limited
09.2018 - 01.2022
  • Acted as Technical and Operational lead managing Data Information & Endpoint Security Teams under Cyber Prevent Operations
  • Platforms managed CCS, SEP, DLP, PKI, Email.Cloud, AIP, Mandiant, MDATP, EDR etc
  • Driving security platform operations activities, Accountable for managing performance and availability against defined SLAs and KPIs
  • Accountable for the technical operation of the Cyber Defence security platforms across their full lifecycle
  • Including: reviewing security platform policies, standards and designs; driving complex engineering tasks like deployment of enhanced configurations, capacity reviews, improve platform performance or meet emerging cyber threats; platform optimization; and future development plans
  • Managing change, Incident & problem management
  • Driving Risk Management; Identifying, reporting & remediating technical and operational risks associated with the Cyber Defence security platforms
  • Managing Cyber Defence platform activities with strategical approach in building a robust and structured approach across the security platform lifecycle
  • Driving continuous improvement initiatives to help transform & optimize team performance
  • Operational impact analysis and efficiency calculation for operational growth
  • Integration of technology platform & services with monitoring SIEM tool.

Cyber Security Engineering Specialist - CCS Platform

Vodafone India Services Private Limited
04.2017 - 09.2018
  • Acted as Platform owner and responsible to manage the platform team End to End
  • Responsible for creating\updating CCS Benchmark\Standard in line with Vodafone Standards, SOX and PCI standards
  • Identify compromised machines and suggesting remediation steps to neutralize the threats
  • Analyze security risks and develop response procedures
  • Customer incident support and escalation handling
  • Drive Service Improvement plans & Server Audit activities
  • Reviewing Design Level Change & Proactive Fixing of Issues
  • Support Enablement & Succession Planning
  • Operations Management & Process Streamlining.

Data Information & Endpoint Security Specialist

EMC Technology India Private Limited
06.2015 - 03.2017
  • Responsible for overall CCS\SCSP\SDCS operations, daily checks, reporting and Upgrades
  • Understanding the CCS\SCSP\SDCS Architecture & Deployment at Vodafone
  • Capture detailed requirements for the CCS solution based on the inputs from Stakeholders
  • Creating documentations for Asset Inventory, Access tracker, and Low & High Level Design Documents for the CCS\SCSP\SDCS environment
  • Getting Compliance scanning reports for Enterprise assets spread across multiple domains against SOX\PCI Hardening standards
  • Taking handover from Project Implementation team and reviewing\updating the project transitioning documents and presenting the same to SOC Management for approvals
  • Monitoring and troubleshooting on existing CCS\SCSP\SDCS environment if any issue arises and collaborating with different teams involved & getting the issue sorted out at the earliest.

Senior Technical Support Engineer

Symantec Software India Pvt. Ltd
06.2011 - 06.2015
  • Provide advance technical support to Enterprise customers at a global level [APJ/US/EMEA/UK] for multiple Symantec Products throughout my tenure
  • Symantec Critical System Protection (SCSP) \ Symantec Data Center Security (SDCS) (STS & SCS Certified)
  • SCSP\SDCS allows organizations to secure their physical and virtual servers using host-based intrusion detection (HIDS) and intrusion prevention (HIPS)
  • Gather and record all the collected information about the product issues
  • Analyze the root cause of the problem, In-house simulation of problems
  • Help Customers with their HIDS\HIPS policies if required
  • Interacting with Development & QA members
  • Help customer with backend DB issues & assisting with sizing aspects basis their requirements
  • Symantec Control Compliance Suite (CCS) (STS Certified) (Senior Technical Support Engineer)
  • Troubleshoot environment, configuration, and product issues
  • Clearly document troubleshooting steps and resolutions
  • Filter through incoming ticket queue and prioritize workload effectively
  • Reproducing customer issues In-house and providing evidence where bug fixes are required (Research & Development)
  • Experience of working in cross platforms server environments; managing large customer environments
  • Symantec Endpoint Protection (SEP) (Technical Support Analyst)
  • Perform basic to moderate static/behavioral analysis of malware specimens to determine the effects on internal systems at both the host and network level
  • Identify false positive intrusions and source of suspicious traffic on network
  • Provides after-hour support to manage "Virus Outbreak" on Critical customer's live/production environments
  • Configuration of firewall rules as per the Company Network policy
  • Configuration of Active Directory integration for Authentication and management, Replication and Load balancing, Application and Device control.

Education

Skills

  • Cybersecurity Strategy Development
  • Effective Leadership
  • Teamwork and Collaboration
  • Stakeholder relationship management
  • Vulnerability Management - Reporting, Proactive Review, Impact Analyses & Prioritization
  • Data Information & Endpoint Security SME
  • Information Security Strategy Planning
  • Management Reporting & Story Telling
  • Risk Management - Gap Analysis, Impact Analysis & Mitigation Planning
  • Service Delivery Management
  • Audit Handling (PCI-DSS, SOX compliance)
  • Capacity Planning - Platform & People
  • Budget Planning\Allocation - CapEx, OpEx
  • Disaster Recovery & Business Continuity Planning\Management (BCP\BCM)
  • Solution Designing, Documentation Review, Deployment, Testing & Transition
  • Incident, Change, Escalation & Problem Management
  • Resource Optimization
  • Adaptable, Proactive, Self-motivated, and a Quick learner
  • Good Leadership & Mentoring skills
  • Taking initiatives and carrying out jobs with perfection
  • Good listener, Soft spoken and Team player
  • Ability to work & perform under pressure

Knowledge Acquired

  • CISM
  • CISSP
  • Pen testing with Kali
  • CCNA CyberOPS
  • CCSK
  • Cloud Computing
  • AWS
  • Qualys

Timeline

Deputy General Manager - Security Testing

Vodafone India Services Private Limited
01.2022 - Current

Senior Manager - Cyber Prevent

Vodafone India Services Private Limited
09.2018 - 01.2022

Cyber Security Engineering Specialist - CCS Platform

Vodafone India Services Private Limited
04.2017 - 09.2018

Data Information & Endpoint Security Specialist

EMC Technology India Private Limited
06.2015 - 03.2017

Senior Technical Support Engineer

Symantec Software India Pvt. Ltd
06.2011 - 06.2015

Rohit Goel