Anvesh Chukka
Senior Security Engineer
Hyderabad,TG
Summary
To build and develop a career in the field of Information Security and become a cynosure by maintaining consistency in my performance, contributing knowledge, open minded for improvement and proving myself as a good team player to grow with team, Overall 8.2 years of IT experience with 6.9 years hands on experience on various SIEM technologies.
Overview
11
11
years of professional experience
5
5
years of post-secondary education
3
3
Certifications
Work History
Senior Security Engineer
Wipro Technologies
Hyderabad
10.2018 - Current
- Maintained the SIEM availability within the SLA.
- Defining use cases and creating custom correlation rule, alerts as per organization network architecture.
- Worked on Use case Assessments for multiple customers.
- Administration of Qradar and Logger.
- Attempt to reduce false positive in SIEM.
- Creating reports for the log sources.
- Fine tuning of the rules and reports as per customer requirements.
- Log and event analysis for incident detection, response and containment.
- Preparing and presenting weekly report to the client.
Level 2 – Senior Security Analyst
Telecommunication services company
Amsterdam, Nederland
- Hands on experience working with Arcsight SIEM, ELK and Microsoft security tools.
- Identifying the true positives and escalating the incident to Next level.
- Hands on experience in creation playbooks in Splunk Phantom.
- Identification of False positive detection and tweak the same according to the need.
- Hands on working experience with Network security devices like Vectra,
- Worked with the incident response team for true positive cases
SR Analyst
Financial services company
Hyderabad
- Worked on QRadar SIEM tool to monitor and report on security incidents
- Analyzing suspicious emails (phishing, Spoofed, spam, or other) and finding the legitimacy of those emails, contacting appropriate teams either to whitelist /blacklist email sender, Blocking the malicious domains and IPs.
- Detailed examination of Malware reported events by end users by accumulating all the necessary required information and work with end users on issued remediation.
- Analyzing suspicious URLs which might be compromised/ that might affect the organization network.
- Integrating and troubleshooting windows servers which are not reporting to QRadar.
- Working on Fire Eye Anti APT solution for Email and Network security
- Participated in Cyber drill which is conducted by the RBI (Reserve bank of India).
- Daily-QRadar Health check report, Log sources Error status report, Swift incident report, EPS count of previous day's report, InfoSec feedback report.
- Making a report of the malicious attachment files with hashes and sending them to concern team.
- Integration of new log sources with QRadar.
- Taking access from respective asset owner and troubleshooting the Error state log source.
SOC Analyst
Techwave Consulting India Pvt Ltd
Hyderabad
08.2018 - 10.2021
- Act as first level support for all Security Issues
- Responsible for applying security updates and patches on servers, desktop and laptops.
- Investigating security violations, attempts to gain unauthorized access, virus infections, etc.
- Conducted Phishing Campaigns and phishing mail analysis
- Work with various teams across the organization to improve security posture
Information Security Analyst
IAP Company Pvt Ltd (Genpact)
Hyderabad
10.2016 - 08.2018
- Established new 24/7 SOC operations with a team size of 8 and working as in-house – SIEM: QRadar.
- Resolving and investigating the alerts in QRadar from monitoring team.
- Pro-actively working with other teams for resolving the critical incidents.
- Working on Security Incidents like stolen laptops in resilient tool.
- Good understanding on IPS and working on Wi-Fi access in Mojo tool.
- Analyzing suspicious emails spam emails with PhishMe Triage tool
- Monitoring traffic related to browsing activity of the users with the help of UBA (User Behavior Analytics).
- Maintain keep understanding of evolving internet threats to ensure the security of internal network.
- Demonstrable experience of analyzing and interpreting system, security and application logs in order to diagnose faults and stop abnormal behaviors.
- Aggregate, correlate, and analyze log data from network devices, security devices and other key assets using QRadar.
- Along with creating custom views, reporting and automated alerting for both operational and security use using QRadar.
- Responsible for the creation of the logic to correlate attacks across multiple event sources and attempt to decide of the possible outcome.
- Tracking organization level spam email reported by the resources and sending out inputs to leadership.
SOC Analyst L1
Terra infra solutions
Bangalore
10.2013 - 09.2016
- Experience working in Security Operations Center (SOC) with Arcsight.
- Investigating the alerts in Arcsight
- Experience working in DLP
- Monitoring the inbound out bond mails in McAfee DLP
- Analyzing phishing and spam mails
Education
MBA -
Jagruti Institute of Engineering & Technology
Hyderabad 03.2011 - 08.2013
B.com(computers) -
Kakatiya University
Warangal 06.2008 - 04.2011
Skills
Qradar
Arcsight
Splunk
ELK
Phantom Play books
Microsoft Azure Security Tools
Incident Response
Certification
CEH
Timeline
Senior Security Engineer
Wipro Technologies
10.2018 - Current
SOC Analyst
Techwave Consulting India Pvt Ltd
08.2018 - 10.2021
Information Security Analyst
IAP Company Pvt Ltd (Genpact)
10.2016 - 08.2018
SOC Analyst L1
Terra infra solutions
10.2013 - 09.2016
MBA -
Jagruti Institute of Engineering & Technology
03.2011 - 08.2013
B.com(computers) -
Kakatiya University
06.2008 - 04.2011
Level 2 – Senior Security Analyst
Telecommunication services company
SR Analyst
Financial services company