Sandip Sonawane
Thane
Summary
IT Security Professional with over 14 years of experience in the field of Qualys Policy Compliance, Content Development, Cyber and Information Security, Compliance and Integrity Monitoring. A skilled information security professional experience with having good working knowledge in incident, change, events and log management.
Overview
17
17
years of professional experience
Work History
Cyber Security Analyst L4
Wipro
Mumbai
10.2021 - Current
- Consultant with Citibank
- Completed a major Infrastructure Migration project from Symantec CCS to Qualys Policy Compliance successfully. This involved developing Baseline Configuration and File Integrity Monitoring content for over 200 Application and Middleware level products.
- Policy involved comprehensive security analysis of mission critical applications and operating systems used within Citigroup.
- Worked end to end on 80+ content development projects; including initial requirement gathering, design, development through production releases.
- Worked on QCAR based policies which based on script. Script needs to develop in perl and shell scripts as per requirements provided by policy engineers.
- Worked with product vendor (Qualys) to identify product improvements and present use cases to fulfill those requirements, such as WildCard support, FIM Improvements to increase eCciency.
- Involved in continuous improvement of the product by evaluating and testing product updates delivered by vendor to counter bugs found, such as Cardinality Issues in UI, FIM Exclusions, Policy Export Issues.
- Defined operating standards and processes to be followed within the team and process control manuals. Created procedures for end users to better assist them in requirements submissions.
- Provided knowledge transfers and on the go training to new team members as well as extended operational guidance to multiple teams at various stages of Policy Development cycle.
Systems Engineer L3
Wipro
Budapest
01.2017 - 10.2021
- Consultant with Citibank
- Worked in a team responsible for providing solutions for maintaining Compliance posture of 90k+ server space including Windows/Red Hat/AIX/Solaris using Qualys Policy Compliance and Symantec Control Compliance Suite. Compliance standards included CIS Benchmarks as well as Internal Data Security Standards.
- Worked in conjunction with Business Units, Engineering teams to develop/modify content for Qualys Policy Compliance and Symantec Control Compliance Suite.
- Fulfilled 30+ mission critical requirements for various engineering teams identified during product vulnerability assessments.
- Represented content development in internal design and strategic discussions on various development/migration projects.
- Responsible for maintaining detailed Technology Content Matrix to help operational teams in correctly assigning these contents across the board.
Administrator L3
Wipro
Mumbai
11.2011 - 12.2016
- Consultant with Citibank
- Led the team responsible for monitoring 70k+ systems for File Integrity and Baseline Configuration as defined by Security Content Teams by using & maintaining 60+ production Symantec CCS systems.
- Provided Level 3 functional and operational support for L1/L2 teams.
- Handled intricate scheduling of over 200 policies spanning across 70k+ systems.
- Key participant in multiple Continuity of Business activities, vulnerability patching and reporting.
- Single handedly built Symantec CCS Infrastructure in DMZ segment designed for Trading from procuring systems to production hand oK. Led the team successfully in 2 major application upgrades involving complete overhaul of systems including migration of Application Manager.
- Assisted in the rollouts of Application Website versions on IIS Webserver, including package deployment and configuration. Also handled account setup and entitlements for Application Website end users.
- Leads team of 10 people along with ISO documentation and audit for the project.
Engineer L1
Wipro
Mumbai
09.2008 - 11.2011
- ISA LOG REVIEW- An Audit proven, team charged with providing change and validation reconciliation services for the ISA activities of South Dakota Region. The reconciliation and review process is carried out on the various Mainframe and Unix systems on which SA activities are logged.
Education
M.Sc. - Computer Science
Ahmednagar College
Ahilyanagar06-2008
Skills
- Policy Compliance
- Qualys Guard
- Symantec's Control Compliance Suite
- Security Content Development
- File Integrity Monitoring
- Baseline Configuration Monitoring
- Incident Management
- JIRA
- ServiceNow
- Change Management
- PERL
- Windows
- PowerShell
- Leadership
- Communication
- Work Ethic
- Problem Solving
Hobbies and Interests
- Listening Music
- Trekking
- Travel
- Net Surfing
Languages
- English, Full Professional Proficiency
- Marathi, Native or Bilingual Proficiency
- Hindi, Full Professional Proficiency
- Konkani, Limited Working Proficiency
Timeline
Cyber Security Analyst L4
Wipro
10.2021 - Current
Systems Engineer L3
Wipro
01.2017 - 10.2021
Administrator L3
Wipro
11.2011 - 12.2016
Engineer L1
Wipro
09.2008 - 11.2011
M.Sc. - Computer Science
Ahmednagar College