Aathithya VM

• As an Assistant Consultant - Cyber Security at Tata Consultancy Services Limited, I am part of the Implementation team managing the implementation of EDR/XDR solutions to various customers

Crowdstrike Implementation:

• Involved in various customer engagements within TCS to implement crowdstrike EDR.
• Create an High-level design of the implementation and share it with customer.
• Provide walkthrough of the implementation plan and design to get sign-off and proceed with implementation.
• Work closely with infrastructure team to install the EDR sensors in the scope systems.
• Create policies based on industry best practices and vendor recommended best practices.
• Monitor and analyze alerts/detections in EDR and provide exclusions as and when needed.
• Report compliance of the devices to customer and account management team in a timely manner.
• Provide recommendations to customer about new features available within the product.
• Identified areas of improvement within the organization's processes and procedures.
• Maintained accurate records of all project activities in a timely manner.
• Participated in brainstorming sessions with senior consultants on potential business opportunities.
• Collaborated with stakeholders to contribute recommendations and deliver client objectives.

Palo Alto Cortex XDR Implementation:

• Implemented Palo Alto XDR to multiple customers supported by TCS.
• Integrate all log sources available in the customer environment with Palo alto cortex XDR.
• Create correlation rules for unsupported log sources.
• Create custom queries in XDR as and when needed.
• Work in sync with infrastructure team to install and configure log sources for XDR.

Sophos EDR Implementation: (On-Site):

• Traveled on-site to implement Sophos EDR for a retail customer.
• Understand their EDR needs and suggested features and provided comparative view for the same.
• Assisted the implementation from on-site by coordinating with various teams.
• Prepared design documents based on the requirement and implemented the solution.
• Configured relay and other components for proper functioning of Sophos.
• Implementation involves multiple locations within middle-east.
• Conduct weekly connects with the customer and document the requirements.
• Create weekly executive summary on the progress of the implementation to customer.
• Create customized exclusions and alerting rules.
• Created IOC sweeping rules and reporting to support the shopping season.
• Ensure the compliance of the systems by doing daily health check.
• Proper upgrade channel is followed to upgrade EDR agents running in the environment.

• Endpoint Security - Implementation, Migration, Upgradation and Administration of Trend Micro Deep Security and Symantec Endpoint Protection
• Basic Knowledge on Vulnerability Management with Hands on knowledge on Qualys guard
• ITIL- Managing the incidents, service requests and environment changes documentation through Service Now
• Operating System- Windows server (2003, 2008, 2012, 2016 and 2019) Microsoft Windows 10/8/7/Vista/XP and Linux
• Aspiring IT Professional with over 7+years of experience in IT industry and 5 years’ experience in Information Security Domain in Enterprise Security Services and managing security software Symantec Endpoint Protection and Trend Micro Deep Security.

• Excellent Knowledge on Incident, Change and Problem management process
• Worked as L1 support for AIX, Linux and Windows for 11 Months
• Performing application upgrade on AIX server as per script provided by Application team
• Working with Change management team to get approval for changes raised
• Working with Incident management team for P1 and P2 raised by customer on high priority and engaging concern teams
• Working with Tivoli alerts and follow SOP for alerts
• Monitor control M jobs and follow instruction provided in document.

• Excellent Knowledge on Incident, Change and Problem management process
• Worked as L1 support for AIX, Linux and Windows for 11 Months
• Performing application upgrade on AIX server as per script provided by Application team
• Working with Change management team to get approval for changes raised
• Working with Incident management team for P1 and P2 raised by customer on high priority and engaging concern teams
• Working with Tivoli alerts and follow SOP for alerts
• Monitor control M jobs and follow instruction provided in document.