Bhavy Garg

Background

About Bhavy Garg

Experience: Currently Managing two security roles: • Conducted HITRUST security audits to ensure compliance with HIPAA. • Lead SecOps and Cloud Security, serving as a subject matter expert across relevant verticals. • Conduct threat modeling, risk assessments, and collaborate with DevOps on security initiatives. • Perform regular security assessments of cloud platforms, software, and infrastructure. • Configure systems to meet industry best practices and hardening standards. • Utilize tools like Veracode and Orca to monitor and remediate vulnerabilities. • Drive cybersecurity awareness and conduct training sessions for internal teams. • Develop and document security standards for secure cloud management, configuration, and deployment. • Evaluate emerging technologies, tools, and development techniques impacting security. • Partner with DevOps and Development leads to address vulnerabilities and improve SDLC processes. • Conducted HITRUST security audits to ensure compliance with HIPAA. • Implemented and maintained security controls in cloud environments. • Implemented and configured SIEM tools and optimized security solutions. • Led incident response plans during critical periods. • Managed and maintained firewalls, endpoint protection systems, VMware, and other environments to ensure secure operations. • Conducted training sessions and workshops for staff to enhance awareness and adherence to security protocols. • Collaborated with third-party penetration testers to evaluate system security. • Conducted HIPAA audits and ensured compliance with relevant security standards. • Responded to and mitigated security incidents and conducted risk assessments. • Implemented and enforced security best practices and policies to safeguard sensitive data and system integrity. • Created solutions to enhance existing security layers and system protection. • Identified potential false positives, endpoint detection, response, and patching systems. • Performed SAST and DAST testing to identify vulnerabilities. • Executed risk assessments, business continuity, and disaster management plans. • Automated tools for AWS, Linode, and Google Drive to enhance security operations.