SURINDER CHUGH

Around 10+ years of experience in the field of IT with a focus on Bridging Security, Governance, and Robust Web Protection | Security GRC & WAF Engineer.

My passion lies at the intersection of ensuring robust security measures and fostering governance, risk management, and compliance (GRC) strategies. With a seasoned background in Security GRC and a specialized focus on Web Application Firewall (WAF) engineering, I bring a unique blend of skills and expertise to the cybersecurity landscape.

In my role, I champion the fusion of security best practices with regulatory compliance frameworks, seamlessly aligning organizational objectives with stringent security protocols. I excel in orchestrating comprehensive GRC assessments and meticulously analyzing security controls, risk landscapes, and compliance requirements to fortify systems while ensuring adherence to industry standards and regulations.

Simultaneously, my proficiency extends to WAF engineering—an area where I engineer, configure, and maintain WAF solutions with precision and finesse. Leveraging in-depth knowledge of various WAF technologies, I navigate complex on-premise and cloud-based deployments, optimizing web protection across diverse landscapes. My expertise encompasses configuring WAF settings, conducting traffic analysis, and continuously refining WAF rules and signatures to mitigate evolving threats effectively.

My holistic view of security extends beyond technical aspects—I understand the pivotal role of GRC in fortifying an organization's resilience against cyber threats. This insight, coupled with superior communication and presentation skills, empowers me to engage and collaborate effectively with cross-functional teams, translating complex security strategies into actionable plans.

Thorough knowledge of risk assessment using enterprise risk management principles and concepts.

Good knowledge of Security Operations Centre (SOC) working processes, change management, Incident Management, Identity Access Management, conducting Audits, IT Security Governance, Disaster Recovery and Business Continuity Planning.

Comprehensive understanding of TCP/IP, Firewalls, Cryptography, Digital Forensics, Project Management, Security Policies, Disaster Recovery and Risk Management.

Hands on experience with SIEM tool, IDS / IPS tool, email security, Antivirus solution.

Pursuing Certified Information Systems Security Professional (CISSP)