Summary
Overview
Work History
Education
Skills
Certification
Timeline
Generic
AMARDEEP KUMAR

AMARDEEP KUMAR

Incident Responder|Threat Hunter|Malware Analyst

Summary

Watchful professional offering comprehensive, hands-on experience identifying, investigating and responding to information security alerts. Expertise in searching through data-sets to detect threats and anomalies and administering metrics to maintain security processes and controls. Focused on helping businesses safeguard sensitive data from hackers and cyber-criminals.

Overview

16
16
years of professional experience
5
5
Certifications

Work History

ASSISTANT VICE PRESIDENT – SENIOR THREAT HUNTER ANALYST

UOB SINGAPORE
03.2022 - Current
  • Responsible for performing investigations, helping to implement and develop solutions supporting the incident response function
  • Lead the daily work of security analysts in triaging incoming alerts, and prioritizing response and effective remediation of threats
  • Experience with log analysis from multiple sources (e.g
  • Firewall, IDS, endpoints) to identify and investigate security events and anomalies
  • Experience with the creation and tuning of alerting rules from a SIEM and other devices in response to changing threats
  • Ensure compliance with SLAs as well as relevant process and procedures and will play an active role in continually improving them
  • Coach and mentor more junior resources.

ASSISTANT VICE PRESIDENT/VICE PRESIDENT – INCIDENT RESPONSE MANAGER

BANK OF AMERICA
12.2009 - Current
  • Proactively hunting for threats and enacting identification, containment, and eradication measures while supporting recovery efforts
  • Perform deeper analysis, trending and root cause analysis of the events/incidents handled by SOC Analyst
  • Work on escalated security incidents (malware infections, unauthorized access, malicious emails, Phishing, Distributed Denial of Service (DDoS) attacks, etc.)
  • Analysis of cyber threats by deep packet inspection
  • Detection of threat by analyzing large set logs from different security & Network devices, different Operating system, Databases, Web servers/Applications etc
  • Enhance and Build Cyber threat detection use cases and assist in analyzing & reducing false positive
  • Identify infection/compromise in the company utilizing threat intelligence and indicators of compromise (IOCs) from different threat Intel sources and regulators
  • Interface with Cyber Intel, Engineering and security teams
  • Assist in Incident Response for Detected/Reported Cyber security Incidents
  • Generate security reporting and metrics as required
  • Process improvement and coaching to SOC Analyst
  • Review and analyze cyber threats and provide SME support and training to junior level security analysts
  • Interact and assist other investigative teams within Bank of America on time sensitive, critical investigations
  • Participate as part of a close team of technical specialists on coordinated responses and subsequent remediation of security incidents
  • Manage the security monitoring enrollment process to ensure adequate coverage and effectiveness of all new and existing cloud and premise based applications, services and platforms
  • Maintain detailed tracking plan of all internal/external enrollment outcomes/recommendations and provide support through to implementation
  • Act as a liaison between cyber-defense, engineering, security architecture, network & system operations, and functional project teams to ensure effective project implementation that meets incident response requirements
  • Work with colleagues in other technology departments as well as the business and product offices to establish effective, productive business relationships
  • Define baseline security monitoring requirements for all new projects, services and applications joining bank network
  • Facilitate the development and tuning of SIEM rules to support enrollments and ensure high fidelity alerting
  • Protecting enterprise systems and information by promptly responding to security threats and incidents, acting individually and as part of a team to resolve issues

CONSULTANT

CAPGEMINI CONSULTING PVT LTD
MUMBAI
08.2008 - 01.2009
  • Monitored backup operations schedule, taking appropriate action to recover/re-queue any failed backup activities, escalating to 2nd and 3rd level Backup Services Support as necessary
  • Installed, configured hardware and OS on Servers
  • Performed patching, backups on multiple environments of Solaris, Linux and VMware.

SENIOR SYSTEM ENGINEER

NEC HCL TECHNOLOGY PVT LTD, TOKYO
08.2007 - 08.2008
  • Responsible for, both manage and support all Production, Development and Staging instances of Oracle (Version 9i ,10g) & HP-UX (11.11), Solaris 9, Linux Servers
  • Responsible for deployment of the biometrics security application for the client of NEC
  • Provided technical support to government agencies and worked very closely with the governments of Greece, Germany, Belgium, Turkey, Algeria, India, US, Mexico, Singapore, South Africa, UK, Austria, Romania, Azerbaijan, Netherlands, Tanzania, Egypt, etc
  • Responsible for integrating various biometric components and provided support to the offshore team for development of the application.

UNIX ADMINISTRATOR

INS SOLUTIONS PVT LTD
02.2007 - 08.2007
  • Managed Datacenter operations support of Bharti Airtel for UNIX/Linux and Windows platforms in 24x7 environments
  • Performed Incident communication
  • Installation, maintenance & troubleshooting of all h/w, s/w problem
  • Updating the server with latest patches & service packs
  • Raising alerts for failed services and manage appropriately (raising Trouble Ticket, send out communications as per prevailing procedures, engage second and third tier support teams and On-call support, Incident Management etc
  • Running some applications in scheduled times with high priority level and monitoring for errors in O.S
  • Level and Application level
  • Experienced on working Remedy ticketing system with Incident Management, Change Management
  • Performed error analysis and recovery, documentation and procedures required for reference
  • Monitor, Control and perform all scheduled activities on Data Center Systems and remote application servers
  • Participated in change with SA, Application team and proactive change management, Incident management and Manager on duty.

Education

Bachelor's Degree - Information Technology and Computer Science

INDIRA GANDHI NATIONAL OPEN UNIVERSITY

Skills

Critical thinking skills

undefined

Certification

CISSP (Certified Information System Security Professional)

Timeline

ASSISTANT VICE PRESIDENT – SENIOR THREAT HUNTER ANALYST

UOB SINGAPORE
03.2022 - Current

ASSISTANT VICE PRESIDENT/VICE PRESIDENT – INCIDENT RESPONSE MANAGER

BANK OF AMERICA
12.2009 - Current

CONSULTANT

CAPGEMINI CONSULTING PVT LTD
08.2008 - 01.2009

SENIOR SYSTEM ENGINEER

NEC HCL TECHNOLOGY PVT LTD, TOKYO
08.2007 - 08.2008

UNIX ADMINISTRATOR

INS SOLUTIONS PVT LTD
02.2007 - 08.2007

Bachelor's Degree - Information Technology and Computer Science

INDIRA GANDHI NATIONAL OPEN UNIVERSITY
CISSP (Certified Information System Security Professional)
CEH (Certified Ethical Hacker)
COBIT 5 Foundation
ITIL Foundation V3
ACADEMICS, 4TH JANUARY 1980 ~ NATIONALITY: INDIAN ~ LANGUAGES KNOWN: ENGLISH AND HINDI
AMARDEEP KUMARIncident Responder|Threat Hunter|Malware Analyst