Sourav Ramakrishna

Resolved 100% of complex VPN routing drops, ARP loops, and Docker/16 subnet IP collisions by utilizing network analysis tools (tcpdump/Wireshark) for rapid Layer 2-7 traffic analysis.

Managed enterprise security controls and enforced compliance baselines using SaltStack, pushing automated remediation commands to 1,000+ global endpoints 10x faster than traditional methods.

Engineered an automated Threat Detection and Response (TDR) pipeline with Python and PowerShell, querying SIEM REST APIs every 60 seconds to reduce Mean Time to Detect (MTTD) to <1 minute for fileless malware alerts.

Executed remote onboarding and deployment of Elastic Agent security services across 40+ corporate devices for a healthcare client, ensuring immediate infrastructure visibility without business disruption.

Engineered a custom Python/Flask backend, integrating a 30+ node deception network (T-Pot) with the central SIEM to streamline 1,000+ weekly threat indicators for enhanced automated intelligence.

Led penetration testing for an in-house web application, identifying 20 vulnerabilities (6 critical) and reducing risk exposure by 40%.

Collaborated with IT and engineering teams to remediate 15 identified issues, accelerating the fix timeline by 2 weeks.

Deployed secure network design principles, including segmentation, DMZs, and VPNs, to fortify campus infrastructure against cyber threats.

Configured and managed IDS/IPS platforms (Snort, Suricata) for real-time traffic analysis and proactive threat response.

Detected and remediated critical vulnerabilities in live business websites, improving overall security posture by 30%.

Performed manual and automated penetration testing using Burp Suite and OWASP ZAP, identifying critical flaws like SQLi and XSS.

Developed Python scripts to automate security scanning and reporting, enhancing efficiency and consistency in vulnerability management.

Communicated detailed remediation plans to development teams via email and Slack, strengthening client relationships and ensuring timely fixes.

Implemented comprehensive vulnerability assessments for web and network systems, identifying and tracking 15 weaknesses to reduce reportable threats by 25%.

Utilized IDS/IPS and SIEM tools for effective threat detection and event management, ensuring proactive security monitoring.

Prepared and presented professional-grade technical documentation and client-facing reports, facilitating informed decision-making.

Collaborated on network security protocol deployment and updated firewall rules to strengthen system defenses.