Looking for a job

Vishwajeet User

@vishwajeetuser6

Global IT Security Vulnerability Leader at Bekaert Industries, leading enterprise IT and OT vulnerability management and security programs.

India

Message

At Bekaert Industries, I lead the enterprise vulnerability management program, including implementation and configuration of Tenable Vulnerability Management. I’ve expanded the program to cover industrial control systems and IoT devices through architecture reviews and network segmentation.

I also lead security work across application, network, cloud, and OT/IoT environments. This includes security assessments and hardening for critical embedded systems, PLCs, SCADAs, and OT devices, as well as secure cloud integration with enterprise SIEM platforms.

Previously, at Zensar Technologies, I managed the Information Security business unit and its VA&PT, SIEM, WAF, DMZ operations, and compliance audits. I implemented Fortinet WAF and Cloud WAF use cases, McAfee SIEM detection content, and CASB DLP policies.

Across roles at Tech Mahindra, Capita IT Services, Capgemini, Bajaj Allianz, and SEED Infotech, I worked on security audits, penetration testing, vulnerability management, and risk assessments. My work has included ISO 27001, PCI DSS, ISAE 3402, SSAE 16/18, and HIPAA compliance.

Experience

Work history, roles, and key accomplishments

Current

Global IT Security Vulnerability Leader

Current

Bekaert Industries

Aug 2021 - Present (5 years 2 months)

Leads the enterprise vulnerability management program, including implementation and configuration of the Tenable platform. Oversees ISO 27001 implementation, risk management, security audits, and OT/IT security architecture.

Project Manager, Information Security

Zensar Technologies

Oct 2017 - Jul 2021 (3 years 9 months)

Managed the internal Information Security business unit, owning VA&PT, SIEM, WAF, and DMZ operations, and compliance audits. Delivered security advisory engagements for global clients and implemented Fortinet WAF and McAfee SIEM detection content.

VAPT SIEM WAF DMZ ISO 27001 PCI DSS Fortinet CASB DLP Risk Assessment Penetration Testing

Information Security Consultant (Manager)

Tech Mahindra

Nov 2014 - Oct 2017 (2 years 11 months)

Served as Lead Auditor for ISO 27001:2013 across all project functions and support units. Performed internal and external network and server penetration testing using Kali Linux, Nessus, Nmap, Acunetix, and Burp Suite, and delivered SAST and DAST proofs of concept.

ISO 27001 Penetration Testing Kali Linux Nessus Nmap Acunetix Burp suite SAST DAST PCI DSS Cloud Assessments Phishing Simulations

Information Security Consultant

Tech Mahindra

Nov 2014 - Oct 2017 (2 years 11 months)

Served as Lead Auditor for ISO 27001:2013 across all project functions and support units. Performed internal and external penetration testing and delivered SAST and DAST proofs of concept for clients.

ISO 27001 Penetration Testing Kali Linux Nessus Nmap Acunetix Burp suite SAST DAST PCI DSS Cloud Assessments Phishing Simulations

InfoSec Security Consultant

Capita IT Services

Dec 2012 - Nov 2014 (1 year 11 months)

Led ISO 27001:2005 ISMS reviews and ISAE 3402 Type 2 engagements. Executed web application penetration testing, secure SDLC reviews, and vulnerability assessments across workstations, servers, and network devices.

ISO 27001 ISAE 3402 Engagements Web Application Penetration Testing (WAPT)Secure SDLC Vulnerability Assessment Network Hardening Privileged Access Reviews

ISMS Consultant (Internal Auditor)

Capgemini

Apr 2011 - Dec 2012 (1 year 8 months)

Conducted ISO 27001:2005 internal audits across various functions and coordinated external audits for ISO 27001, SSAE 16, and PCI DSS. Deployed and operated Qualys Guard for global vulnerability management and performed VA&PT and security hardening.

ISO 27001 SSAE16 PCI DSS Qualys Checkpoint Algosec Cisco Nipper VAPT Vulnerability Management Security Hardening Risk Assessment

ISMS Consultant

Capgemini

Apr 2011 - Dec 2012 (1 year 8 months)

Conducted ISO 27001:2005 internal audits across multiple functions and coordinated external audits for ISO 27001, SSAE 16, and PCI DSS. Deployed and operated Qualys Guard for global vulnerability management.

ISO 27001 SSAE16 PCI DSS Qualys Vulnerability Management Checkpoint Algosec Cisco Risk Assessment

VA&PT Engineer

Bajaj Allianz

Mar 2010 - Aug 2010 (5 months)

Performed VA&PT on Cisco routers, switches, and firewalls using AlgoSec and Nipper. Built executive dashboards and remediation reports for IT leadership.

VAPT Cisco Algosec Nipper Fortinet HP DPX Trend Micro Active Directory

VA&PT Engineer (Internship)

Bajaj Allianz

Mar 2010 - Aug 2010 (5 months)

Performed VA&PT on Cisco routers, switches, and firewalls using AlgoSec and Nipper, and built executive dashboards and remediation reports. Operated Fortinet firewall, HP DPX Data Protector, Trend Micro AV, and conducted Active Directory access review.

VAPT Cisco Algosec Nipper Fortinet HP DPX Trend Micro Active Directory

System Security

SEED Infotech

Mar 2008 - May 2009 (1 year 2 months)

Operated Fortinet firewall, HP DPX Data Protector, and Trend Micro AV. Conducted Active Directory access reviews.

Fortinet HP DPX Trend Micro Active Directory Firewall Operations Vulnerability Assessment Penetration Testing Network Security

Education

Degrees, certifications, and relevant coursework

Symbiosis International University

Master of Business Administration, Information Systems & Security

Full-time MBA in Information Systems and Security from Symbiosis Centre for Information Technology, Symbiosis International University, completed in 2011.