Summary
Overview
Work History
Education
Skills
Technical Certifications
Certification
Languages
Timeline
Generic

Narayana Kommi

Singapore

Summary

Extensive Technical experience in Configuring and Troubleshooting of Cyber Security Devices like VMware Carbon black EDR servers, FireEye EX & NX, Qradar SIEM, Anomali Threat intel feeds, Siemplify SOAR. Advanced understanding on the MITRE ATT&CK Framework. Expert knowledge of prominent cyber threat actor groups, campaigns and TTPs. Knowledge of network, system, and application monitoring technologies (i.e. antivirus products, firewalls, proxy, network and host intrusion technologies). Expertise in handling firewalls such as Cisco, Palo Alto, Checkpoint. Good understanding of information security technologies and processes. Good knowledge and understandings of TCP/IP. Strong understanding of common security vulnerabilities, attack vectors/TTPs used by threat actors and corresponding IOCs.

Overview

14
14
years of professional experience
1
1
Certification

Work History

SOC Engineer

NCS PTE LTD
12.2021 - Current
  • People management: Proactively conducting meetings with vendors to discuss issues with respective to project implementation, Conducting project meetings with stake holders and Preparing minutes of meetings, Maintaining key project issues, setting target deadlines to fix them, Managing team of professional engineers to support SOC operations, Vendor management, Incident management and coordinating with Vendor to fix or remediate SOC engineering related issues, Record keeping of all changes and incidents and reporting to management on monthly basis, Providing mentorship to team
  • Product management: SIEM implementation and Administration (IBM Qradar), Various log sources / devices integration with SIEM, IBM QRADAR SIEM Use cases creation, Anomali threat intel feed integration with SIEM, EDR and SOAR products, Troubleshooting technical issues and optimize SIEM performance, Review and Analyze security logs from various sources to identify true positive incidents, Using IOCs, Threat Intel Feeds tools to detect zero-day attacks and vulnerabilities, Research emerging security threats, identify IOCs and TTPs for continuous improvement of detection capabilities of ASOC (Advanced Security operation center), Contribute to updating/creation of runbooks and operational documentation, Implementation and maintenance of EDR solution with VMware Carbon Block, Deployment of EDR (Endpoint detection and response) agents in all windows workstations, Windows servers, Red hat Linux and Unix servers, Watchlist creation in EDR server and applying policies to trigger alerts for suspicious and malware processes and binaries, Qradar SIEM installation and maintenance, Anomaly integration with Qradar console for threat intel feeds, Carbon Block EDR integration with Qradar for Watchlist data feeds, Conduct regression testing on new rules and enhancements, Provide support for all Audit requests, Manage and coordinate change process engagement with regards to current security solutions, Attending to Audits and follow-up on reviews, Perform regular and periodic compliance-related tasks.

Tech Cyber Security Specialist

UBS AG
01.2020 - 12.2021
  • Firewall audits/reviews for restricted locations (quality checks, ruleset standardization & simplification), Firewall change management (pre and post implementation checks), Firewall rules life cycle management, ranging from pre-change reviews and approvals, post-change audits/reviews, rule ownership and recertification, firewall audits and proxy risk reviews, Providing security consultancy for the setup of new locations, datacenter moves, setting up environments for new applications, and additionally defining base rulesets for all of these, Management and execution of Firewall housekeeping processes on a periodic basis, Ensuring firewall changes are complete and correct and are compliant to architecture design and policies, Attending to Audits and follow-up on reviews, Perform regular and periodic compliance-related tasks.

Senior Network Security Engineer

Encora Technologies Pte.Ltd
09.2019 - 01.2020
  • Project: Working for UOB Bank Singapore Ltd as Senior Network Security Engineer
  • Part of cyber security engineering team of UOB bank Singapore project
  • Responsibilities: Implementation of IDS/IPS and FireEye APT solution for the bank, Support a wide array of security solutions and infrastructure deployed within the bank, On boarding new SIEM log sources, enabling new use cases and supporting all existing use cases, Manage and support the log management environment, Conduct regression testing on new rules and enhancements, Provide support for all Audit requests, Manage and coordinate change process engagement with regards to current security solutions.

Network Security Engineer

Kelly Services
02.2019 - 09.2019
  • Project: Working as Network Security Engineer deputed into Cognizant technologies Singapore
  • From Cognizant I was assigned to UBS bank Singapore as Firewall Policy Lifecycle Analyst
  • Responsibilities: Firewall audits/reviews for restricted locations (quality checks, ruleset standardization & simplification), Firewall change management (pre and post implementation checks), Firewall rules life cycle management, ranging from pre-change reviews and approvals, post-change audits/reviews, rule ownership and recertification, firewall audits and proxy risk reviews, Providing security consultancy for the setup of new locations, datacenter moves, setting up environments for new applications, and additionally defining base rulesets for all of these, Management and execution of Firewall housekeeping processes on a periodic basis, Ensuring firewall changes are complete and correct and are compliant to architecture design and policies, Attending to Audits and follow-up on reviews, Perform regular and periodic compliance-related tasks.

Sr Network engineer

Jobline Resources Pte Ltd
09.2018 - 02.2019
  • Project: Working as a Sr Network Engineer deputed into Fujitsu Singapore
  • Implementing and maintenance of CISCO, check point, HP, F5 and other vendor devices in PSA Singapore project
  • Responsibilities: Implementation of Network and Security infra for PSA Singapore, The project involves the management of Network and Security for PSA Singapore, Configuring the Firewall policies on checkpoint, ASA and paloalto firewalls, Firewall Rule Lifecycle management and compliance reporting against firewall rules using algosec and in house tools, Evaluate and upgrade firewall hardware and/or firmware, Ensures system compliance with all established information security policies, Performs regular review of firewall rulebases and recommend necessary optimization actions, Signature update on Source fire NIPS and Palo alto NIPS, Coordinating with Change management to perform the changes to the security devices like IPS, Firewalls etc..., Working with JIRA Ticketing tool for Incident and change management.

Sr Consultant IT security

NCS PTE Ltd
12.2014 - 09.2018
  • Responsibilities: Implementation and maintenance of EDR solution with VMware Carbon Block, Deployment of EDR (Endpoint detection and response) agents in all windows workstations, Windows servers, Red hat Linux and Unix servers, Watchlist creation in EDR server and applying policies to trigger alert for suspicious and malware processes and binaries, Qradar SIEM installation and maintenance, On boarding new log sources, enabling new use cases and supporting all existing use cases, Anomaly integration with Qradar console for threat intel feeds, Carbon Block EDR integration with Qradar for Watchlist data feeds, Manage and support the log management environment, Conduct regression testing on new rules and enhancements, Provide support for all Audit requests, Manage and coordinate change process engagement with regards to current security solutions, Attending to Audits and follow-up on reviews, Perform regular and periodic compliance-related tasks.

Senior Network Engineer

ASM Technologies Pvt Ltd
08.2013 - 06.2014
  • Responsibilities: Working as a CISCO TAC (APT-GTC) Technical support Engineer, Providing the technical support for CISCO customers over Email, phone and troubleshooting over WebEx session, CISCO Products: Cat 2960, cat3550, 3650, 3750, cat4503,4504,4506, cat6503, 6504,6506,6509, 7600 series multilayer switches, Nexus 5000 and Nexus 7000, Supervisor Engines: SUP2, 32, IV, V, 6E, 7E, SUP720, SUP2T, Providing technical assistance for Cisco customers over Phone and email, Troubleshooting all technical related issues of Catalyst Switches and SUP engines, Writing KB articles for Cisco LAN switches, Escalation any IOS bug related issues to Development team, Providing RCA for Customers related to LAN switches.

Network Engineer

World partners Pte Ltd
06.2014 - 02.2014
  • Project: Working as a Network consultant Engineer deputed into NCS Singapore
  • Implementing CISCO, F5 and other vendor device in data centers for Singapore SOE project
  • Responsibilities: Implementation of Network and Security infra on new GNOC for SOE data centers, Configuring the Firewall policies, OS upgrade / downgrade on firewalls of Palo Alto and CISCO ASA, Signature update on Cisco Source fire NIPS/IDS and Palo alto IPS/IDS, Working with BMC Remedy Ticketing tool for Incident and change management, Work processes include developing and implementing firewall configurations and policy based upon network security best practices, Troubleshooting Firewall request incident on Remedy.

Sr Network Engineer

CSS CORP Pvt Ltd
11.2011 - 07.2013
  • Responsibilities: Working as a Juniper TAC (JTAC) Technical support Engineer, Providing the technical support for Juniper customers over phone and troubleshooting over remote session, Juniper Products: Steel-Belted Radius Server (SBR), DX, UAC/IC, Providing technical assistance for Juniper networks customers over Phone and email, Troubleshooting all technical related issues of SBR, DX and UAC.IC products, Escalation any OS bug related issues to Development team, Installation Configuration of SBR radius server in windows as well as Unix environment, Integration with LDAP servers, Configuration of SLB, GSLB, Clusters of DX product, Providing RCA for network outage, Creating rules, roles for users using UAC / IC, Troubleshooting authentication related issues.

Associate IT consultant

ITC INFOTECH INDIA PVT LTD
05.2010 - 10.2011
  • Responsibilities: Configuration, maintenance, troubleshooting & operations of all network devices in the NOC Center, ACLs configuration and maintenance, Vlan, Port channel configuration, Switch IOS / Firmware upgrade.

Education

Master of Science - Information Technology

K S R College of Technology
Tamilnadu, India
04.2009

Skills

  • Penetration Testing
  • Network Security
  • Firewall Management
  • Endpoint Protection
  • Identity Management
  • Operating System Security
  • Public Key Infrastructure
  • Digital Forensics
  • Vulnerability Assessment
  • Two-Factor Authentication
  • Secure Network Design
  • Security Architecture
  • Data Loss Prevention
  • Intrusion Detection
  • Incident Response
  • Access Control
  • IoT Security
  • Security Orchestration, Automation, and Response
  • DDoS prevention
  • Encryption Technologies
  • SIEM Provider Management
  • Network Security Management
  • IP Addressing and Subnetting
  • Firewall Installation
  • Port security knowledge
  • Critical Thinking
  • Risk Assessment
  • Security assurance
  • Information Governance
  • Security infrastructure architecture

Technical Certifications

  • CCIE security, Cisco.
  • PCNSA, Palo Alto Networks.
  • SCSA, Siemplify.
  • Azure 900.

Certification

  • CCIE Security (Cisco Certified Internetwork Expert)

Languages

English
Advanced (C1)
Telugu
Advanced (C1)
Tamil
Advanced (C1)
Hindi
Upper intermediate (B2)

Timeline

SOC Engineer

NCS PTE LTD
12.2021 - Current

Tech Cyber Security Specialist

UBS AG
01.2020 - 12.2021

Senior Network Security Engineer

Encora Technologies Pte.Ltd
09.2019 - 01.2020

Network Security Engineer

Kelly Services
02.2019 - 09.2019

Sr Network engineer

Jobline Resources Pte Ltd
09.2018 - 02.2019

Sr Consultant IT security

NCS PTE Ltd
12.2014 - 09.2018

Network Engineer

World partners Pte Ltd
06.2014 - 02.2014

Senior Network Engineer

ASM Technologies Pvt Ltd
08.2013 - 06.2014

Sr Network Engineer

CSS CORP Pvt Ltd
11.2011 - 07.2013

Associate IT consultant

ITC INFOTECH INDIA PVT LTD
05.2010 - 10.2011

Master of Science - Information Technology

K S R College of Technology
Narayana Kommi