Kiran Kumar Jittuga

IT Security Engineer L2

Celestial Systems Pvt Ltd

10.2021 - 11.2024

Experienced SOC analyst in – Microsoft ATP Defender & Crowd strike falcon, WatchGuard, Office-365, Splunk, IBM Qradar SIEM.
Performed security event monitoring of heterogeneous networks such as firewalls, IDS/IPS & DLP devices using SIEM for security events and triage security incidents.
Experience in providing end-to-end support to enterprise counterparts, identifying the root cause of sophisticated enterprise initiatives with endpoint security solutions.
Working experience in SOC environment with hands-on experience using SIEM Splunk tool which includes log analysis fine-tuning exiting correlation rules to reduce false positive and responding to incidents.
Performed Folder exclusion policies and other device based polices, tags in EDR & WatchGuard antivirus solutions for endpoint.
Experience in Check dashboards like Review the CheckMK dashboards for overall health for monitored system & services.
Good knowledge on MITRE ATT&CK, diamond model, or other cyber threat kill chains.
Strong knowledge and working experience on Office 365 Email gateway solutions completely own, manage, monitor & administer the email security stack & policies for both OnPrem & cloud environments that include Office 365 Email security solutions.
Strong experience in managing Endpoint Agents over Windows and Linux operating systems, Active Directory, Windows Event Logs.
Knowledge of a breadth of security technologies and topics such as: Security Information and Event Management (SIEM), IDS/IPS, Data Loss Prevention (DLP), Proxy, Web Application Firewall (WAF), Enterprise Anti-Virus, Sandboxing, Network and Host based firewalls.
Performed managing of Splunk SIEM and experienced with creating new alerts for Security use cases. Log sources integration to Qradar SIEM solution.
SIEM Event Analysis and manual Co-relation of Events to narrow down the Infection Vector and root cause analysis with Splunk & Azure sentinel.
Experience in writing correlation rules and monitoring Enterprise Security Application.
Conducted investigations on infrastructure through forensic analysis to identify Indicators of Compromise (IoCs).
Working on TAP as well as TRAP dashboard & TRAP implementation in environment.
Experience in Phishing email analysis and Proofpoint email security gateway.
Experience in acknowledging known issues to avoid redundancy & resolving flapping services to address on both services and hosts with intermittent status changes.
Experience in Analyzing phishing/malicious email campaigns to identify IOCs and contain those IOCs & on an Email Fraud defense to secure environment from hackers and fraudsters.
Provides regular monitoring, triage, and incident response to automated security alerts using Security tools (like SIEM Splunk, Azure Sentinel. EDR, Antivirus, and Email Security).
Experience in identifying wire fraud and account compromised cases taking appropriate action.
Experience in analyzing malicious executables, device exceptions, and other security rules via the Defender Intune portal. File blocking, Virus definition reporting, end point reporting.
Notifying stakeholders & keeping the teams informed of system statues, performance, or issues via scheduled reports & notifications. And coordinating maintenance windows to communicate planned downtime to avoid false alarms.
Expertise in Splunk Enterprise architecture such as Search Heads, Indexers, Deployment server, License Master, Heavy/Universal Forwarders.

Summary

Overview

Work History

IT Security Engineer L2

Network Engineer

Education

B. Tech - Electrical and Electronics Engineering

Skills

Certification

Disclaimer

Timeline

IT Security Engineer L2

Network Engineer

B. Tech - Electrical and Electronics Engineering

Similar Profiles

Anshul GargAnshul Garg

Binayak TalwarBinayak Talwar

Diana Arzuaga RiveraDiana Arzuaga Rivera

C. RathiC. Rathi

Sunil Kumar SSunil Kumar S