Jonnakoti Saikumar
Cybersecurity Senior Specialist
Kochi
Summary
Results-driven Cybersecurity Senior Specialist with over 7 years of experience in managing and securing complex IT environments. Expertise in security analysis, threat detection, incident response, and SIEM administration with a strong focus on IBM QRadar and Azure Sentinel. Proven ability to develop and implement robust security measures to protect organizational assets. Certified in advanced cybersecurity from IIT Kanpur and multiple Microsoft certifications.
Overview
7
7
years of professional experience
16
16
Certifications
Work History
Senior Specialist
01.2022 - Current
- Conducted continuous monitoring of security events using IBM QRadar to detect and respond to potential security incidents
- Fine-tuned multiple use cases and developed new ones for enhanced threat detection and mitigation
- Addressed and resolved flow processor issues to improve system performance
- Rectified Sentinel rules to ensure proper tactic mapping
- Created and implemented Fortinet Session Clash rules to bolster network security
- Innovated the Office 365 breakglass account logon rule for enhanced access management
- Devised methods for Device Identification and Data Connectors, improving data integration processes
- Crafted playbooks for Auto Disabled Analytical rules and Data Ingestion & Heartbeat Anomaly Incident Summary
- Resolved QRadar License issues to maintain compliance standards
- Engineered automation to send notifications for endpoints/VMs inactive for 24 hours
- Implemented advanced threat detection techniques using User and Entity Behavior Analytics
- Led an 8-member team, assisting in external projects and resolving QRadar issues.
Consultant
01.2021 - 01.2022
- Successfully completed the Defender for Identity for Microsoft ATA replacement
- Fixed the QRadar logrun.pl script for Identity log messages, ensuring accurate log processing
- Resolved QRadar performance issues, including accumulator and disk usage problems
- Upgraded QRadar environments and resolved post-upgrade issues
- Attended training on Sentinel and other security updates to stay current with industry trends
- Won the TopGear Challenge for exceptional performance in security tasks
- Converted QRadar rules to KQL and participated in Sentinel workshops
- Performed log analysis, forensic analysis, user behavior analysis, email analysis, and sandboxing
- Gathered and evaluated threat intelligence from various sources.
Senior Administrator
01.2020 - 01.2021
- Troubleshooted log sources and created use cases for security incidents
- Developed and fine-tuned templates for EPS Analysis, offense handling, and log source troubleshooting
- Integrated and tested log sources in QRadar, resolving domain controller issues
- Created automated reports and workarounds for QRadar bugs
- Configured UBA and Pulse in QRadar, fixing naming parsing issues for Office 365 log sources
- Developed custom event properties and automated expressions for log parsing
- Developed use cases for QRadar health monitoring and fixed various QRadar bugs.
Security Analyst
01.2017 - 01.2019
- Managed all facets of incident response
- Detected anomalies and threat patterns using SIEM dashboards
- Researched latest threats, attack techniques, vulnerabilities, and created appropriate SIEM use cases
- Scheduled assessment/tuning of SIEM rules to eliminate false alerts
- Deployed QRadar, integrated log sources, and managed complete administration
- Parsed/mapped and wrote/modifed regular expressions to capture payload information
- Provided SIEM and use case training to vendors/teams
- Generated SIEM reports for IT administrators and business managers to evaluate the effectiveness of security policies.
Education
Advanced Certification in Cybersecurity - undefined
01.2023 - 1 2024
MTech - VLSI System
01.2017 - 1 2021
Bachelor of Science - Mathematics, Electronics, & Computer Science
01.2013 - 1 2016
Skills
IBM QRadar Administration
SIEM (Security Information and Event Management)
Security Incident Response
Resilient, HPSM, Easy Vista
Azure Sentinel (Automations, Playbook, KQL Hunting, Analytical Rules)
High-quality Security Analysis Reports
Threat Intelligence and Analysis
Log Analysis and Forensic Analysis
Anomaly Detection and User Behavior Analysis
Security Training and Awareness
Automation and Scripting
Compliance and Governance
Natural Language Processing
Certification
Microsoft Certified: Azure Fundamentals (AZ-900)
Accomplishments
- Received CRS Beyond Boundaries H1 Award.
- Received 5 Inspiring Performance Awards
- Received 4 Value Your Contribution Awards
Timeline
Indian Institute of Technology Kanpur - Advanced Certification in Cybersecurity,
01.2023 - 1 2024
Senior Specialist -
01.2022 - Current
Consultant -
01.2021 - 01.2022
Senior Administrator -
01.2020 - 01.2021
Vellore Institute of Technology - MTech, VLSI System
01.2017 - 1 2021
Security Analyst -
01.2017 - 01.2019
Adikavi Nannaya University - Bachelor of Science, Mathematics, Electronics, & Computer Science
01.2013 - 1 2016