Ramkumar Somi Ganesh

Incident Management - Support significant incidents within CIRT & TI A Dynamic environment with over 190K endpoints with over 40K incidents. Reduced containment time & detection time by over 80% Perform Incident Response, Digital Forensics, and Threat Intelligence Management for Honeywell as part of the Global Honeywell SOC team. Working as an incident commander for large scale security incidents by coordinating analysts from different regions to ensure proper remediation of the incident.

• Maintaining and understanding requirements documents. • Analyze, measure and Improve supplier security metrics • Performing Scanning using the tools (Ike-scan, Nmap, hping3) • Performing vulnerability assessment using CVE and NVD databases. • Perform penetration testing on Embedded products using the technology (IPsec, File System, OS security, Firewall) • Assist customers, implementation teams, and suppliers in modifying/implementing and improving security

• Implemented PCI DSS 3.2 compliance and ISO 27001:2013 standard for a client based in Americas. • Performing Application Security Assessment using OWASP standard. • Performing vulnerability assessment using Nessus. • Performing IPS/IDS Benchmarking, Firewall Benchmarking and Router Rule Set Review. • Managed security products such as antivirus, IDS, IPS, firewalls, SIEM, log management and Splunk. • ArcSight Monitoring, DLP Monitoring (Screen Capture, Device Plug, Email, URL Access).

• Installing network and computer systems. • Maintaining, repairing and upgrading network and computer systems. • Diagnosing and fixing problems or potential problems with the network and its hardware, software and systems. • Monitoring network and systems to improve performance.