Rama E.

Background

About Rama E.

I have been engaged in broad range of Information Security projects that are dealt in: Cyber Security, Data and Network Analysis, Identity and Access Management, Project Management, Security Training, and Awareness Programs. Currently, I am working as a Digital Security Solutions Architect for BJ's wholesale club. Excellent experience as a Akamai WAF Engineer. Previously worked as a SIEM Security Engineer for JCPenney. Worked as a Senior Security Analyst for Hawaiian airlines and, Malaysia Airlines- Sound knowledge in Cyber Security domains (Security Operations, Vulnerability management, IAM, Network Security, Endpoint Security, Application Security, Digital Security). Worked as a Sr. Information Security Analyst. Currently, working as Digital Security Solutions Architect- Have an excellent exposure on NIST, PCI-DSS, HIPAA, SOX, Zero Trust, Cyber Kill chain, Mitre ATT & CK, CI/CD pipeline- Proficient in handling different types of security tools (SIEM, IPS/ID, Network Firewalls, Proxies, Web Application Firewalls, SAST/DAST etc.)- Deep understanding of cloud computing architecture, technical design, and implementations, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS) and Software as a Service (SaaS) delivery models- Great knowledge on Security Architecture and implementing security strategies in the environment- Have good exposure in vulnerability management. Work on different types of scans (scheduled, ad hoc, authenticated, unauthenticated etc,). Assess the CVSS score and prioritize the CVEs, and work with stakeholders for their mitigations by providing remediation's- Proficient in preparing Microsoft Patch Tuesday reports. Prepare the reports based on Microsoft Operating system variants, applications, calculate CVSS from NVD, assess severity levels, and provide recommendations to stakeholders for applying patches- Proficient in conducting Red Team exercises and in identifying threats and working for their mitigations- Proficient in creating the SIEM correlation rules- Proficient in conducting threat hunting exercises- Worked on different types of roles (blue team, purple team, red team)- Proficient in analyzing and preparing threat Intelligence reports- Well versed in conducting detailed analysis of security incidents to determine the appropriate mitigation, response, and/or recovery actions- Have a good exposure on working Security Engineering tasks and actively participated in implementation of many tools in the environment- Have an extensive knowledge of different types of ticketing tools.