Ricky Putra

-.Make sure all about comply & Conducting Surveilance Audit External of ISO 27001:2022 -.Conducting internal audit -.Implement ITsecurity control -.Create security awareness -.Conducting VA & Pentest Web App -.Manage M365 environtment in Microsoft 365 AdminCenter -.Create custom script using powershell to enhance security -.Conducting Threat Intelligence -.Create Rule, Monitoring and Response in SIEM -.Implement risk management by risk assessment -.Troubleshoot device/account if related to azure environment

-Enforce Axiata Group security policies -Maintain patching process -Escalate/block tickets as needed -Create cyberdrills & awareness with GRC -Escalate intel from GSOC -Handle cloud security via Google SCC & Azure -Collaborate with DevOps for Secure SDLC -Ensure OS hardening with Infra team via CIS & Ansible -Perform VA/PT with SAST/DAST -Remediate/monitor via Fortinet, F5 WAF, Security Scorecard -Track IAM via Entra ID -Phishing excs via Defender -Monitor via Sentinel SIEM, SentinelOne XDR, and Purview DLP

1.Monitoring on SIEM Tools using ELK 2.Create reporting daily based on Alert on SIEM, AV Symantec, WAF Akamai, IDS Smart ATD Checkpoint 3.Monitor and Respons on EDR 4.Create Playbook about of SOC 5.Conduct as Threat Intelligence 6.Give advise for updating environment technology to prevent vulnerabillity 7.Conduct as Vulnerabillity Assessment using Nessus/Tenable 8.Collaborated with another security sectors 9.Threat Assessment 10.Create Report Monthly 11.Vulnerabillity Review Advisory