ARUNA JOSHY

Cybersecurity Consultant with over 6 years of experience in Security Operations Center (SOC) and SOAR environments, specializing in SIEM content development, use case engineering, and threat detection. Expertise includes multiple SIEM platforms such as IBM QRadar, CrowdStrike SIEM, Securonix, Microsoft Sentinel, Qualys, and Tenable Nessus. Proficient in designing advanced detection use cases aligned with the MITRE ATT&CK framework, integrating diverse log sources, and optimizing alert fidelity. Holds multiple certifications and possesses hands-on scripting skills in Python and SQL to enhance detection and automation efforts. Open to opportunities in Kochi with flexibility for relocation and remote work.

• Lead the SIEM migration for 4 clients from IBM Qradar to CrowdStrike SIEM with respect to detection coverage.
• Completed the creation of all the use cases with in the committed time line without any disruption in the regular monitoring
• Implemeted MITRE attack framework for more coverage across all the device types
• Created Automation workflows for more efficiency and accuracy

• IBM QRadar
• Securonix
• CrowdStrike SIEM
• Microsoft Sentinel
• Tenable Nessus
• Qualys
• Microsoft Defender ATP
• Office 365
• SOAR (IBM Resilient/XSOAR)
• Case Development
• MITRE ATT&CK Mapping
• Alert Tuning
• Log Normalization
• Python
• SQL
• Regex
• SOC Operations
• Incident Response
• Threat Investigation
• Cloud Compare
• ArcGIS