Vijay Machineni

Cybersecurity Consultant

LTIMINDTREE

Hyderabad

11.2022 - Current

Performing recurring and on-demand vulnerability assessments on organizational systems and cloud environments as scheduled using the Qualys Vulnerability tool.
Maintaining and upgrading documentation regarding the vulnerability management process, including policies and procedures.
Creating and updating the OS-level controls policy documents as per the CIS framework using the CISCAT tool for organization assets (endpoints, servers, and network devices).
Qualys user administration and identity management. Periodic users' roles and login evaluations. Created multiple custom roles based on specific roles to achieve least privilege access.
Improved and automated existing vulnerability management systems with CyberVisible tool and ServiceNow integrations.
Created KPIs and KRIs, and CISO dashboards using Qualys query language in the Qualys tool for senior management review.
Deployed General and Cluster sensors in AWS and Azure containers for container security.
Onboarded multiple clients, integrated agents into their environments, and developed a vulnerability management process.
Using continuous monitoring in Qualys created various rule sets for continuous monitoring of well-known, critical vulnerabilities. Using various threat intelligence sources, such as Cert-in, CISA, and Mitre.org.
Deployed multiple Qualys scanners in the organization to support on-demand scans for customized OS and network devices' multiple locations.
Executed proof of concept implementations to validate product (Qualys container security, Microsoft defender) feasibility.
With a focus on fulfilling auditor requirements, we provide dedicated support for external and internal audits in vulnerability management.
Worked closely with stakeholders to prioritize remediation efforts based on risk levels associated with identified vulnerabilities.
Collaborated with external vendors to perform penetration tests across our organization and closed reported findings within the SLA.
Created detailed reports on network vulnerabilities, threats, and risks for senior management review.
Conducting periodic vulnerability assessments on organizational assets based on asset criticality.
Created detailed reports outlining findings from security audits and presented them to management for review.
Assisted with incident response activities, such as log analysis of compromised systems and investigation of malicious activity.
Troubleshooting minor problems and reporting larger technical issues related to Qualys agent communication and scanner reachability.