May 2021 - Present
Cybersecurity Product Specialist Expert
Pacific Gas and Electric Company
✧ Responsible for the operational management, configuration, monitoring, and reporting of related product(s) or service(s).
✧ Respond immediately to security incidents and provide post-incident analysis.
✧ Defend systems against unauthorized access, modification, and/or destruction.
✧ Document and manage Cybersecurity processes, procedures, policies, and control documentation.
✧ Train peer employees in product support, security awareness, protocols, and procedures.
✧ Collaborate with stakeholders and partner teams on the planning, implementation, and rollout of cyber programs and solutions.
✧ Partner with Cybersecurity, Compliance teams, and other key stakeholders to alert or resolve detected product anomalies.
✧ Facilitate/Lead Root Cause Analysis.
✧ Research and recommend security controls and tools upgrades.
✧ Introduce new innovative solutions that enhance the existing capabilities of the product(s) or service(s).
✧ Develop methods of automation and optimization.
✧ Partner with peers to develop the strategic vision and understand how it applies to the targeted products or services.
✧ Understand the industry’s product positioning, the product’s key benefits, and the product’s targeted users.
✧ Partner closely with the vendor to influence the product’s future capabilities.
✧ Work closely with cross-functional teams to troubleshoot and resolve complex operational issues.
✧ Drive conventions and standards (such as usage or configuration) across multiple products to maximize user experience.
✧ Skills: Control, Vulnerability Assessment, Project Planning, IT Risk Management, IT Security Policies & Procedures, Information Security Management, Technology Change Management, Disaster Recovery, Technology Product Development, IT Strategy, NERC-CIP, IT Security Assessments.

May 2021 - Present
Cybersecurity Specialist Expert
World Wide Technology · Full-time (United States)
Skills:
✧ Cybersecurity
✧ Program Management
✧ Product Leadership

Jul 2018 - Jan 2025
Risk and Advisory practitioner (Compliance, Assurance and IA)
Deloitte (United States)
✧ Work in the DevSecOps projects, where chalked out the integration method of the various DevOps tools with security features and tools to tighten and secure the whole DevOps process flow.
✧ Work on the GAP analysis and GAP remediation for Audit Azure SOC1, SOC2 Operations, and Risk Management.
✧ Work on the SOC/SOX/HIPAA/HiTrust/FedRamp/GDPR regulatory framework and Audit for Patch Management and Compliance.
✧ Work with Ansible and Playbook.
✧ Experience in Docker containerization.
✧ Experience with SSO/F, Identity and Access areas control, security check, and management.
✧ Work on AWS policy drift and created the automation of the AWS resources with Python.
✧ Work in the Risk Assessment and GAP Analysis for various cloud practices.
✧ Work on the maintenance of privileged accounts with PowerShell scripting and Active Directory knowledge.
✧ Work on the appropriate approach to the security protocol of various build and CI tools including VSTS, Jenkins, and Maven.
✧ Initiate and examine Twistlock and Aqua roles in securing the DevOps pipeline.
✧ Worked on the Secrets Manager to enhance centralized security during the automation process in the CI-CD pipeline.
✧ Experience in working on DevOps/Agile operations processes and tools (Code review, unit test automation, Build & Release automation, Environment, Service, Incident, and Change Management).
✧ Experience in all facets of the full CM process with tools such as SVN, GIT, Perforce, Jenkins, Bamboo, Chef, and Puppet.
✧ Experience in development and configuration with software provisioning tools like Chef, Puppet, and Ansible.
✧ Experience with Amazon Web Services (AWS) and the configuration of various Amazon products (Amazon EC2, Elastic Load Balancing, Auto Scaling, Amazon S3, Amazon SES, Amazon CloudFormation, Amazon OpsWorks, Amazon SNS, Amazon IAM, Amazon CloudWatch, Amazon Elastic Beanstalk, Amazon RDS).
✧ Configure and deploy to Application Servers WebLogic and WebSphere.