Security Active Directory

Ramanjot Singh Anand

*************@*****.***

Ph: 204-***-****

Profile

Nearly 9 years of experience in the field of Information Technology.

Demonstrated ability to coordinate tasks and adjust to demanding work

pressures. Self-starter personality with a zeal to excel in areas of

Information Assurance, Network Security, Vulnerability Assessments,

Information Risk Assessment, Information Security Audits and Computer

Security Incident Management.

A team player dedicated to an environment where profitability, teamwork,

and client retention are core company values. Quick and flexible learner

with the ability to adapt to the new technologies.

Technical Expertise

Operating System Free BSD Unix, Red Hat Linux, Fedora Core, WinNT,

WinXP, Vista, Windows 7

Programming SQL, PL/SQL, Regular Expressions (RegEx)

Language

Database System Oracle 9i, Postgres SQL

Software Packages MS Office, Microsoft Visio, Adobe Products

Ticketing Software Request Tracker (RT), Service Now, Numara

Footprints, Clarify, BMC Remedy

Security Novell Sentinel

Information and

Event Management

Snort IDS, Tipping Point IPS, FireEye Web MPS

Device Management

Wireshark, Tcpdump

Packet Analyzers

QualysGuard, Nessus, McAfee Vulnerability Manager,

Vulnerability Nmap

Scanners

Veracode, IBM Rational AppScan, NTOSpider, HP

Web Vulnerability Webinspect

Scanners

Identity Management RSA Authentication Manager, IBM Tivoli Identity

Manager

Softwares

Web Security Cisco Scansafe

Academic Qualifications

Masters in Engineering in Information Systems Security

2010

Concordia University, Montreal, Quebec, Canada

Bachelor of Engineering in Computer Science and Engineering

2003

Dehradun Institute of Technology, Dehradun, Uttarakhand, affiliated to

Uttar Pradesh

Technical University, Lucknow, India..

Three year Diploma in Electronics and Communication Engineering

2000

Lala Lajpat Rai Polytechnic, Ajitwal (Moga), affiliated to Punjab

State Board of

Technology and Industrial Training, India

Certifications

Certified Ethical Hacker (C EH) v8

Experience Summary

* Senior IT Security Analyst

May 2013 - Present

Ceridian Canada Delivery Team

Fidelity National Information Services, Winnipeg, Canada

Roles and Responsibilities

. Conducting Vulnerability Scans using QulaysGuard and analyzing the scan

results.

. Conducting Web Application Security Scans using Veracode and AppScan

analyzing the scan results.

. Application Assessment for a new application requested to be installed in

the enterprise.

. Managing Tipping Point Intrusion Prevention Systems (IPS).

. Managing FireEye Malware Protection System.

. Managing the Intrusion Detection System (IDS) and addressing the

incidents flagged by the device.

. Managing the RSA Authentication Manager for VPN access.

. Managing, Enforcing and Monitoring Web usage policies using Cisco

ScanSafe Web Security.

. Resolving internal Service Desk tickets related to IT Security.

. Analyzing reports from RSA FraudAction, in order to contain online

phishing and Trojan attacks.

. Reviewing monthly security patches from Microsoft, Java and Adobe.

. Provisioning software tokens and SecurID (hardware) VPN tokens using RSA

Authentication Manager.

. Working towards upgrading the current VPN solution to the latest version.

. Investigating trojan/virus activity detected by IDS, followed by basic

forensic analysis of the incident.

* Security Operations Support Specialist

June 2012 - May 2013

Security Operations

Great-West Life Assurance Company, Winnipeg, Canada

Roles and Responsibilities

. Managing the queues of automated Security Access Requests to ensure their

timely process and that service targets are continuously met.

. Validating access requests to ensure that they are complete and accurate

and that all required information and correct authorizations are provided.

. Analyzing SAR to determine impact to current and or future group or

single user access.

. Ensuring that Security incidents representing security set-up errors or

technical failures are responded to, investigated, assessed and resolved

in a timely manner.

. Performing second level analysis and investigation of security access

incidents, requiring a sound understanding of the supporting technologies.

. Processing and resolving routine and high risk, sensitive incidents.

. Identifying drafts, recommending enhancements to procedure documentation.

. Contributing to the Security Administration knowledge base by providing

technical and business information, and reviewing other contributions for

their correctness, appropriateness and clarity.

. Recommending improvements to processes and procedures

. Working as Subject Matter Expert and a resource person for a new

application for IAM (Identity and Access Management) for the department.

. Acting as Subject Matter Expert and working with System Analysts to

improve the IAM tool.

. Auditing randomly chosen completed requests to see if the process was

properly followed.

* Information Security Analyst

December 2011 - June 2012

Managed Security Services

Seccuris Inc., Winnipeg, Canada

Roles and Responsibilities

. Employing knowledge of security concepts and practices to proactively

identify threats, vulnerabilities, and exploits.

. Investigating Snort IDS alerts in the interval reports and escalating to

the client if found threatening to the client environment.

. Investigating Event based alerts and escalating if found suspicious or

malicious in nature.

. Providing clients with direction to remediate security events.

. Assisting clients with security incident response and handling

activities.

. Conducting research to maintain and expand knowledge on the latest

security technologies and standards, as well as the threat and

vulnerability landscape.

. Configuring and support client security devices.

. Contributing to internal procedures and technical articles for effective

support, escalation, and client service.

. Managing Change Requests from client issues.

. Monitoring correlation metrics.

. Updating signatures, rules, and policies on client security devices.

. Generating and authoring reports including incident detail, trending, and

recommendations specific to client environments.

. Independently maintain knowledge of threat and vulnerability landscape.

. Creating Snort IDS filters using Regular Expressions for the client

sensors to suppress alerts which were non threatening.

* IT Analyst

July 2011 - December 2011

Business Technology

Postmedia Network Inc., Winnipeg, Canada

Roles and Responsibilities

. Administering Active Directory 2003 by creating and deleting user, vendor

accounts in addition to resetting passwords for users.

. Creating and managing security groups in Active Directory.

. Participated in the creation and ongoing maintenance of a role based

security model in Windows 2003 Active Directory.

. Involved in the creation and support of organizational unit structures,

group policies, and delegation of authority.

. Maintained company policies and procedures for governing Corporate

Security, Email, Access Control and Internet Usage.

. Applied corporate security standards, in a role based environment.

. Implemented and maintained security group policy, delegation of

authority, and privileged access in accordance with corporate security

standards.

. Administering Blackberry Enterprise 5.0 Server and enabled permissions

and assigning corporate encrypted policies for Blackberry users along with

resetting Activation Passwords for the Blackberry Users.

. Resetting voicemail passwords for the VoIP telephone users using Cisco

Unity and Avaya site Administration

. Supporting users and vendors using Cisco VPN client on VPN over IPSec.

. Supporting Users in Citrix Metaframe Presentation Server.

. Creating new mailboxes and public folders, granting roles to access

existing shared mailboxes and public folders by maintaining the corporate

security policy on Microsoft Exchange 2007.

. Providing over the phone Technical Support to inbound users.

. Remote/Onsite support to solve Desktop Related problems.

. Processing issues using ITIL best practices which includes problem

logging, problem recognition, research, isolation, resolution and follow-

up steps.

. Providing guidance/training for less experienced personnel.

. Virus and Spy ware Removal

* Helpdesk Support Engineer

September 2010 - May 2011

IOS Inc., Montr al, Canada

Roles and Responsibilities

. Resetting account passwords for the users in Active Directory.

. Configuring new Hardware and Software.

. Performing routine audit of the system.

. Maintaining firewalls to ensure security of the system.

. Collecting the tasks from the clients and decrypting the data and

encrypting the processed work and reporting.

. Integrating new technologies into existing system to ensure more privacy

and speediness.

. Responsibility for Quality Assurance of all technical documentation for

the company.

* Service Desk Operator

August 2009 - August 2010

Academic Information Technology Services (AITS)

Concordia University, Montr al, Canada

Roles and Responsibilities

. Managing ENCS user accounts for students and professors of the

university.

. Duties in managing user accounts included password resets and making the

new user understand the university security policy for ENCS account

holders.

. Providing new users with a username and password along with the email

address of the university.

. Giving a quick overview of the Data and Drive Structure, Email policy,

Printing policy to the new account user.

. Providing support to off campus students using SSH Tunneling to access

their user accounts and computers remotely.

. Ensuring smooth uninterrupted operation for over 8,000 computer users in

the university.

. Providing support to the networked Linux (Red Hat) and Windows

environment.

. Monitor network infrastructure to ensure proper functionality and

performance and to identify service impacting events and to ensure network

security compliance, conformance to security standards and practices and

resolve alerts related to device failures.

. Updating the Knowledge base article (FAQs, HowTos and Tutorials)

. Undertake other tasks as required by the seniors in the team

. Processing issues using ITIL best practices which include problem

logging, problem recognition, research, isolation, resolution and follow-

up steps.

* System Analyst

August 2006 - November 2008

K.W. Rims India (pvt.) Ltd.

Ludhiana, Punjab, India

Roles and Responsibilities

. Adding, removing, or updating user account information including

resetting passwords through Active Directory.

. Adding, removing, or updating Distribution Lists and Groups.

. Managed access control on Distribution Lists and Groups in Active

Directory.

. Managed build and repair all Windows XP/2000/NT/98 Servers and Client

Workstations.

. Managed and Kept all Servers running with latest patches & software.

. Monitored the systems for viruses & kept Servers/PCs updated with latest

antivirus patches.

. Troubleshoot computer/network, Internet and email problems for users.

. Installed Hard drives, CD-ROMs, Ram, Network cards, Video, Audio and

Modem devices.

. Addressed to issues such as Printers and System Failures.

. Monitored system security procedures to protect the system from physical

harm, viruses, unauthorized users, and data damage.

. Conducted product evaluations of upgraded or new hardware and software

identifying strengths, weaknesses, and potential benefits.

* Assistant Network Administrator

February 2004 - July 2006

M.G. Infotech Ltd.

Ludhiana, Punjab, India

Roles and Responsibilities

. Managed PCs & related software - OS & Applications on them

. Managed and Kept all Servers running with latest patches & software

. Monitored the systems for viruses & kept Servers/PCs updated with latest

antivirus patches

. Addressed to issues such as Printers and System Failures

* Lecturer in Department of Computer Science

November 2003 - January 2004

Gujranwala Guru Nanak Khalsa College

Ludhiana, Punjab, India

Roles and Responsibilities

. Head of the Department of Computer Science and Applications

. Managed the Departmental Affairs

. Taught Undergraduate Students of Science, Arts and Commerce

. Taught Postgraduate Diploma Students of Computer Applications

* Undergraduate Networks Trainee Engineer

September 2003 - October 2003

Trident Group of Industries

Sangrur, Punjab, India

Roles and Responsibilities

. Installation and configuration of Windows and Linux machines.

. Establishing Cable Network in the Campus

. Onsite support to solve Desktop Related problems

Achievements and Extra Curricular Activities

. Bagged third position in a class of 50 students in the final year of

Diploma

. Consistently figured among the top 10 students in Graduation

. Active participation in dramatics, quiz, choreographies etc. in

college

. Captain of Bhangra (a famous folk dance of Punjab) at state level

Relevant Coursework

. Foundations of Cryptography(INSE 6110)

. Crypto-Protocol and Network Security(INSE 6120)

. Operating Systems Security(INSE 6130)

. Middleware and Application Security(INSE 6140)

. Security Evaluation Methodologies(INSE 6150)

. Security and Privacy Implications of Data Mining(INSE 6180)

. Cybercrime Investigations(INSE 691E)

Language Proficiency

English, Hindi, Punjabi, French (Beginner)

References

Available upon Request

[Ramanjot Singh Anand]

Contact this candidate