Mohammed Javadudeen Palliyalil
Security Analyst
Summary
An enthusiastic Security Analyst with over 4.4 years of experience insecurity monitoring and infrastructure support and 1.6 year of experience in network support. Passionate about protecting organizations from cyber threats and continuously improving security posture. Skilled in utilizing various SIEM solutions to monitor, analyze, and investigate security-related activities. Committed to staying current with the latest cybersecurity trends and technologies to enhance threat detection and response capabilities.
Overview
6
6
years of professional experience
4
4
years of post-secondary education
5
5
Certifications
3
3
Languages
Work History
Cyber Security Consultant
Active Bytes Technologies
5 2023 - Current
- Developed SIEM-simulated cyber drill environments Cyber Range for immersive learning experiences, utilizing platforms such as Splunk, IBM QRadar, and Elastic
- Investigate and resolve alerts for 4 clients, without breaching SLA
- Responsible for 24*7 monitoring, and Operational support using SIEM solutions (Splunk, Elastic , IBM QRadar) for various customers
- Perform analysis and investigation using SIEM solutions to identify and mitigate threats
- Creating and fine-tune use cases, as well as develop dashboards for effective monitoring and analysis.
- Performing Threat hunting using IOC'S to proactively identify potential security breach
- Periodically checking the critical log sources to ensure the integrity and availability of important security data.
- Implementing and optimize Elastic and Splunk Architecture, configuration, and troubleshooting of the SIEM tool
- Integrating various network devices, servers, and databases with SIEM solutions
- Collecting, analyzing, and correlating log data from various sources such as firewalls, Windows/Linux servers, databases, web servers
- Creating and fine-tune use cases, as well as develop dashboards for effective monitoring and analysis
- Advise customers on best practice and use cases on how to use this solution to achieve customer end state requirements
- Periodically checking the critical log sources to ensure the integrity and availability of important security data
- Maintaining up-to-date documentation of Standard Operating Procedures (SOPs), playbooks, and update trackers
- Blocking remote hosts, malicious URLs' by managing and reinstalling policies in Fortigate NGFW, McAfee Proxy
- Mentor junior members of the team to help them learn and achieve their full potential
- Able to learn and handle special requirements from customer
- Professionalism in documenting Security Incidents, Investigation findings and reasoning.
- Developed customized endpoint protection solutions that significantly reduced malware infections within client environments
Security Analyst
SISA Information Security
05.2021 - 05.2023
- Performing continuous monitoring in the Security Operations Centre (SOC) to analyze security events and alerts generated by the SIEM system (In House built tool based on ELK)
- Implementing and optimize ELK Stack Architecture, configuration, and troubleshooting of the SIEM tool.
- Performing the Monitoring, Alert Detection and Alert Response
- Creating and fine-tune use cases, as well as develop dashboards for effective monitoring and analysis
- Analyze security events/logs and report on threats and
incidents across various platforms and environments. Escalate complex cases to the Detection team and the system owners. - Managed to send daily, weekly and monthly reports to clients in all format according the requirements
- Analyze security events/logs and report on threats and incidents across various platforms and environments
- Escalate complex cases to the Detection team and the system owners
- Support for Security Operation Center (24/7)
- Performing Threat hunting using IOC'S to proactively identify potential security breaches
- Investigate and resolve alerts for 4 clients, without breaching SLA
- Advise customers on best practice and use cases on how to use this solution to achieve customer end state requirement
- Periodically checking the critical log sources to ensure the integrity and availability of important security data
- Conducting research on different solutions and implementations to meet client requirements
Network Support Engineer
Digiplus IT Solutions
02.2020 - 05.2021
- Managed and administered computer networks and related computing environments, including system software, applications software, hardware, and configurations
- Configured and maintained UTL-ONT-72 BBNL Router to ensure optimal network performance and connectivity
- Conducted maintenance and checks on Optical Line Terminal (OLT) devices, including fiber power checking and maintenance, to support reliable network operations
- Provided support for the Kerala Wi-Fi Project, assisting in project planning, implementation, and maintenance to ensure project success
- Installed new cable lines, both underground and overhead, to expand network infrastructure and support increased connectivity requirements
- Conducted troubleshooting and issue resolution to address network-related problems promptly and effectively, minimizing downtime and disruptions.
Information Security Analyst
CMS IT Service Pvt Ltd
02.2019 - 02.2020
- Administered and managed Websense Proxy Gateway and configured Websense and Forcepoint web proxies to ensure secure and controlled internet access
- Monitored internet requests, logged activity, implemented internet usage filters, and generated reports on internet activity to ensure compliance and security
- Conducted Active Directory administration tasks, including user management, group policy configuration, and security permissions management
- Managed McAfee ePolicy Orchestrator to deploy and manage security policies, updates, and patches across the network
- Enabled BitLocker encryption for both removable and non-removable devices to protect sensitive data and ensure compliance with security standards
- Installed and managed antivirus services locally and remotely, ensuring all endpoints were protected from malware and other security threats.
Technical Support Engineer
Universal Business Solutions
07.2018 - 06.2018
- Installed and upgraded equipment maintained by the company in various field locations, ensuring proper functioning and compatibility with existing systems
- Configured hardware and software components after installation to meet specific requirements and optimize performance
- Performed routine maintenance on technology equipment to prolong lifespan and prevent potential issues
- Conducted testing on equipment to troubleshoot issues and ensure functionality, addressing any identified issues promptly
- Documented installation and repair processes, maintaining accurate records for future reference and compliance purposes
- Installed Morpho RD Services for Windows, ensuring seamless integration and functionality
- Installed and configured necessary software on ATM machines to enable card processing, transaction management, and security features, adhering to industry standards and regulations.
Education
Bachelor of Technology in Computer Science Engineering -
Calicut University
Perinthalmanna, Malappuram 02.2013 - 05.2017
Skills
Splunk
Elastic
IBM QRadar
Threat Hunting
IOC Monitoring
Log Monitoring
Phishing Email Analysis
SIEM Integration
Cyber Kill Chain & MITRE Frame Work
SIEM Use Case Creations
Fortigate NGFW
Alert Monitoring
Malware Analysis
Playbook & Run Book Creation
Alert Fine Tune
Websites
Certification
Splunk E-Learning
Timeline
Security Analyst
SISA Information Security
05.2021 - 05.2023
Network Support Engineer
Digiplus IT Solutions
02.2020 - 05.2021
Information Security Analyst
CMS IT Service Pvt Ltd
02.2019 - 02.2020
Technical Support Engineer
Universal Business Solutions
07.2018 - 06.2018
Bachelor of Technology in Computer Science Engineering -
Calicut University
02.2013 - 05.2017
Cyber Security Consultant
Active Bytes Technologies
5 2023 - Current
Similar Profiles
Marc SimmondsMarc Simmonds
Global Account Director at Bytes London Bytes Software ServicesGlobal Account Director at Bytes London Bytes Software Services
Javed PeeranJaved Peeran
Cloud Security consulting at Active Cloud and Cybersecurity Technologies LLCCloud Security consulting at Active Cloud and Cybersecurity Technologies LLC
Alyssa KerrAlyssa Kerr
Executive Assistant to Dept.Leaders in SCE and AMS at Raytheon Technologies- Active Secret ClearanceExecutive Assistant to Dept.Leaders in SCE and AMS at Raytheon Technologies- Active Secret Clearance
Lorenzo ScardalaLorenzo Scardala
Cyber Security Consultant at KPMGCyber Security Consultant at KPMG
B ReenaB Reena
Cyber Security Consultant at GenpactCyber Security Consultant at Genpact