Subitha C S

Tools Used: KeePass, Azure Key Vault, AWS Tenants, SPN, CipherTrust Manager (CTM), CTE Agent, WinSCP, PuTTY, Puppet, Syslog – Linux and Windows SQL Server, CyberArk.

• Implemented and managed CipherTrust Transparent Encryption to secure sensitive data at rest across 50+ servers (App and DB), including Linux and Windows environments.
• Validated agent-server communication with Syslog, analyzed denied logs, and fine-tuned encryption policies to enhance security and compliance.
• Identified and remediated encryption vulnerabilities, strengthening data protection, and risk mitigation strategies.
• Optimized CipherTrust Manager by decommissioning retired clients, reducing encryption management costs by 20%.
• Provided encryption troubleshooting and advisory services, assisting clients in resolving post-onboarding security issues.
• Advised clients on encryption best practices, data protection strategies, and regulatory compliance (ISO 27001, GDPR, SOC 2).
• Led the migration of agent servers from DSM to CTM, achieving end-to-end encryption and a 99% reduction in data breaches.
• Generated and managed CipherTrust encryption keys for cloud environments (Azure, AWS, Salesforce) to ensure secure key lifecycle management.

Tools Used: Delphix Continuous Data Engine, Compliance Engine, MS SQL, Oracle.

• Understood technical landscape of client to tailor data management solutions.
• Developed scoping questionnaire and collaborated with application and database teams for security insights.
• Deployed Delphix Data Masking and Virtualization solutions to ensure secure data management.
• Integrated source and destination data with Delphix for seamless masking implementation.
• Configured applications, environments, connectors, and rule sets while reviewing security alignment.
• Created and managed profiling jobs to classify sensitive data per industry standards.
• Customized masking algorithms for sensitive fields, ensuring compliance with GDPR, CCPA, and ISO 27001.
• Executed data masking jobs and refreshed non-production environments to maintain data privacy.

Tools Used: Mage Data, SQL Server, SSMS, Oracle, Jira, Windows, and Linux OS, Postman, PuTTY, WinSCP, and CyberArk

• Conducted technical workshops to analyze application landscape, assessing data security risks and impacts.
• Prepared onboarding documentation and collaborated with DBA teams to clone production databases.
• Configured applications in MAGE, integrating with CyberArk API for secure access management.
• Initiated automated sensitive data discovery, enforcing PII, PCI, and PHI protection policies.
• Analyzed data discovery reports, refining data masking policies through iterative validation.
• Customized auto templates for static data masking, ensuring compliance with GDPR and CCPA standards.
• Validated masked data with application teams, reconfiguring templates for secure deployment.
• Tested automation workflows for data masking and executed quality assurance checks before handover.

Tools Used: ServiceNow, SolarWinds, BMC Remedy Tool, TrueSight, Moogsoft, Cisco IP SoftPhone, Symantec Endpoint Protection, Qualys.

• Tracked application and network alerts, assessing impact based on business criticality.
• Initiated Major Incident Management for critical service disruptions, assigning incidents for rapid resolution.
• Oversaw incident resolution, maintaining lifecycle tracking and ensuring SLA compliance.
• Created problem tickets for new security issues, documenting Root Cause Analysis and Corrective Actions.
• Presented incident status updates to stakeholders during weekly security reviews.
• Conducted vulnerability assessments using Qualys scans, prioritizing remediation efforts by severity.
• Utilized Symantec Endpoint Protection to monitor threats and respond to malware incidents.
• Collaborated with IT security teams to ensure compliance with ISO 27001 and NIST standards.