Salma Sheik H M

Vulnerability Management: Rapid7 and Phosphorus IoT.

• Working as a Nexpose IVM administrator, I assign vulnerability remediation tasks to the concerned teams and follow up with them until the remediation is completed.
• Daily assessment of vulnerabilities identified by the infrastructure scan.
• Prioritizing vulnerabilities discovered, along with remediation timeline(s).
• Configuring, scheduling, and executing vulnerability scans, and delivering scan reports.
• Establishing relationships with system owners and business process partners for the purposes of ensuring that identified vulnerabilities are remediated in accordance with established timelines.
• Provides analysis of vulnerabilities to other team members to assist with overall vulnerability remediation efforts.
• Proficient in updating SSL certificates by generating a CSR using OpenSSL commands.
• Setting up a new scan engine for all the regions (NA, EMEA, APAC) for scanning all the assets.
• Scanning internal IoT devices and generating biweekly vulnerability reports.
• Keeping all the IoT devices up to date with current firmware updates and with no default credentials.

Tufin: Network Management Tool.

• Managed and configured Tufin for network security policy management.
• Conducted policy changes, analyzed network access, and ensured firewall rule optimization to maintain a secure infrastructure.
• Performed regular monitoring and troubleshooting to ensure high availability and performance of Tufin systems.

Sky-high Web Gateway:

• Monitored and reported web traffic activity, providing insights and incident response for potential security threats.

• Monitored security events for 10+ clients using SIEM tools
• Managed security technologies analyzed event data, and recommended remediation
• Monitor and manage security technologies to prevent, detect, and respond to threats

• Managed security technologies using Splunk SIEM; configured alerts and dashboards
• Make sure the health of the SOC tools are always in green
• Make sure internal incident tickets and vendor tickets for SOC tools are resolved