Aj Aowsakorn

Background

About Aj Aowsakorn

Currently hold systems security administrator role for FedRAMP and SOC2 programs at Esri. Certified in CISSP, CC, Security+, MCITP, MCTS, and A+. Responsible for ensuring the security of an organization's computer systems, networks, and data. My role involves implementing and maintaining security measures to protect against unauthorized access, data breaches, and other cyber threats. My responsibilities as security administrator includes: 1. Network Security: Implementing and managing firewalls, intrusion detection systems, and other network security measures to protect against unauthorized access and attacks. Vulnerability Assessment: Conducting regular vulnerability assessments and penetration testing to identify and address potential security weaknesses in the organization's systems and networks. Incident Response: Developing and implementing incident response plans to effectively respond to and mitigate the impact of security incidents or breaches. Security Policies and Procedures: Developing and enforcing security policies and procedures to ensure compliance with industry regulations and best practices. Security Monitoring: Monitoring systems and networks for suspicious activity, analyzing security logs, and investigating potential security incidents. User Awareness and Training: Educating employees about cybersecurity best practices, conducting security awareness training, and promoting a culture of security within the organization. Security Audits and Compliance: Conducting regular security audits to assess compliance with security standards and regulations for FedRAMP Rev5 and SOC2 type2. Security Tools and Technologies: Evaluating, implementing, and managing security tools and technologies, such as antivirus software, encryption solutions, and security information and event management Spunk (SIEM) systems. 9.Security Documentation: Maintaining documentation of security policies, procedures, incident response plans, and other security-related documentation. 10.Continuous Monitoring and Improvement: Staying up to date with the latest cybersecurity threats, trends, and technologies, and continuously improving the organization's security posture.