POOJA UPADHYAY

• Reviewed and assessed 3,400+ AI applications. • Curated and risk-assessed 750+ AI tools. • Recommended governance and blocking controls for 150+ high-risk AI applications. • Improved visibility across hundreds of SaaS applications through security configuration reviews and monitoring initiatives. • Conducted SaaS security reviews for enterprise solutions including CrowdStrike and Proofpoint.

• Monitored and analyzed security events using LogRhythm SIEM. • Investigated security incidents and coordinated response activities. • Managed CrowdStrike Endpoint Detection and Response (EDR) controls. • Supported Data Loss Prevention (DLP) initiatives using Netskope. • Assisted with internal audits, security reporting, and compliance activities. • Maintained compliance with CERT-In security requirements.

•Vulnerability assessments and penetration testing activities. •Phishing attacks, malicious domains, and suspicious IP addresses. •Email security solutions. •Endpoint security, patch management, and hardening compliance activities. •Supported RBI and CERT-In compliance initiatives. •Performed threat hunting and monitored dark web intelligence sources. •Security awareness and phishing simulation campaigns. •Worked with MITRE ATT&CK Framework, Cyber Kill Chain, and OWASP Top 10 controls.

• Performed vulnerability assessments and remediation tracking. • Managed firewall configurations and network security controls. • Conducted security audits and infrastructure reviews. • Supported VPS hardening and operating system security assessments. • Managed vulnerability scanning profiles and reporting processes. • Investigated BlueKeep and other critical security vulnerabilities.

• Managed Cisco ASA and Fortigate firewall environments. • Conducted vulnerability scanning and remediation activities. • Responded to network security incidents within SLA timelines. • Performed operating system patching and infrastructure upgrades. • Managed ticketing systems and technical documentation. • Supported junior engineers through operational knowledge sharing.