Sathish Kumar J
Summary
Looking for a cognitive and challenging career in your organization to deliver quality solutions meeting your needs and expectations marked by my professional excellence thereby actively contributing to the development of your organization with my professional experience and managing skills.
Overview
13
13
years of professional experience
Work History
Senior Security Analyst
CGI
11.2018 - Current
- Responsible for actively protecting CGI’s
- Client environment from various kinds of Trojans and attacks using the client specific
- SIEM tool GALAXI along with other operating tools such as McAfee epo AV, Proofpoint for
- Phishing related issues, Fire eye, Wireshark – ( NX) and Redline (HX)Investigate offenses and create an internal ticket for accountability
- Involved in real time log analysis from different network devices e.g
- Firewalls,
- IDS, IPS, Operating Systems, Proxy Servers, Linux Servers, Active Directory Servers, Web
- Servers etcAttending bridge calls with onsite during rule tuning
- Performs Real time log monitoring, Security incident handling, investigation, escalation of security incidents with recommendations to mitigate the threat
- Swift action on virus detected category offenses thereby identifying the risk hostname and removing it from network
- Preparing SOP (Standard Operations Procedures) and sharing it with customer and internal Teams for the resolved issues
- Categorizing the spam and phishing emails
- Performing live logger search (Arcsight) for the affected sources and destinations thereby analysing live logs
- To check if hostname got infected or not by logging into McAfee EPO
- To create awareness on Spam emails for users by hosting Phishing campaign emails on monthly basis.
Security Analyst
Tata Consultancy Service
Chennai
11.2015 - 11.2018
- Acknowledgement of various offenses in IBM – Qradar tool
- Restarting TOMCAT services whenever Qradar console is down
- Investigate offenses and create an internal ticket for accountability
- Analysing offenses on daily basis to understand and whitelist the repetitive offense
- Submitting non malicious external ip to IBM X-Force requesting them for reanalysis and reduce the risk level
- Swift action on virus detected category offenses thereby identifying the risk hostname and removing it from network
- Investigating on Multiple login failures for same/multiple users
- Deleting the infected file on user machine using Encase tool
- To check if hostname got infected or not by logging into Symantec End Point
- To create awareness on Spam emails for users by hosting Phishing campaign emails on monthly basis
- SYMANTEC END-POINT PROTECTION:
- Completing daily SEP environmental health check
- Pulling risk reports and viewing if any risks are not cleaned, deleted or quarantined
- Updating content of all Windows XP, Windows Vista, and Windows 7 workstations/Servers separately by selecting operating system drop down
- BLUECOAT PROXY:
- Checking health status of Bluecoat Proxy by logging into the console
- To submit website review to Bluecoat if the particular URL is not categorized correctly
- Updating Local production data base of Bluecoat manually if it fails to update by self
- Blacklisting & Whitelisting URL’s in Visual policy manager of Bluecoat
- To view and track the logged activity in Customer Log Module CLM
- Adding subnets to already existing rule based on customer requirement
- To analyze incoming and outgoing quarantined emails that are malicious or suspicious with attachment encrypted and adding them to respective exception policy with valid business justification in Cisco Ironport mailing gateway.
Network Engineer
Adecco India PVT LTD, WIPRO Technologies
Chennai
06.2013 - 10.2015
- The details of the assignments that I have handled are listed below in the reverse chronological order:
- Project Infrastructure Management
- Managing and troubleshooting firewalls (Checkpoint, Paloalto,Cisco ASA,PIX),
- Managing DHCP server and creating the DHCP scope
- Good working knowledge on Checkpoint Firewall (Rules, NAT, High Availability),
- Knowledge of TCP/IP, OSI model, IP addressing & Sub Netting
- Coordinating with vendors for Site Router hardware issues and link
- DR Activity of alternate projects connectivity establishment as BCP
- VLAN Configuration at Customer and Network side
- Maintain backups for all Firewalls, Routers and switches
- Protocols : Routed Protocols – TCP/IP & UDP
- Security : IP Access control list Firewalls : ASA, PIX,Fortigate,Palo Alto &Checkpoint VPN Devices : Cisco ASA Wan Optimizer : Bluecoat Packet shaper 10000 and 12000 Series Services : DHCP
Desktop Engineer, L2
PRIMACCESS TECHNOLOGIES PVT LTD
12.2010 - 06.2013
- Managing Desktop, Laptop and Network issues for the client Wipro
- Technologies
- Configuring Email and Supporting VIP user for Blackberry, Laptop, IOS,
- Android and Windows mobiles
- Managing a team of 5 engineers and Single Point of Contact for escalated issues for WT Client
- Documented helpdesk tickets and performed diagnostics and troubleshooting of system issues
- Understanding the Severity Levels and closing the Calls on priority basis to achieve 100% SLA
- Knowledge on Windows AD (Domain, DHCP, DNS, Domain GP)
- Creating and managing users and groups in AD
- Perform regular maintenance procedures and audits, including the deployment of operating system patches, security hot fixes, software,
L2 Desktop Support Engineer
HCL Technologies
09.2009 - 12.2010
- Configured hardware, devices and software to set up work stations for employees.
- Maintained inventory of installed desktop hardware and software components to keep records accurate and updated.
- Rolled out software updates and applied server patches to thwart threats from penetrating networks.
- Identified scope of problem and provided operational and technical assistance to remedy.
- Removed malware, ransomware and other threats from laptops and desktop systems.
Hardware Engineer
Axiom Info Tech private limited
07.2008 - 01.2009
- Computer Assembling, Installation and Maintenance
- Taking care of computers which are under Annual Maintenance contract
- Installing and configuring the Desktops as per company Standards
- Maintaining HCL, HP, IBM and Assembled Models
- Installation and support to Microsoft windows O/S
- Anti-virus installation and updating the antivirus definitions
- Troubleshooting and replacing of systems spares
- Troubleshooting Dot Matrix Printers, Desk Jet and Laser printers
- Role, Tools o Windows XP/7/8, Desktop applications o Wireless Network o VPN & Citrix Software
Education
SIEM tool IBM Qradar – v 7.2.7, Galaxi Proxy Bluecoat – 9000-30 Model - undefined
BCA - Computer Science
Annamalai University
S.S.L.C - Electronics and communications
DECE Bharath Polytechnic college, Patel Nager Corporation High
Sec. School
CCNA Chennai - undefined
Cyber Security
CEH
ChennaiSkills
Cylance, Symantec End Point Protection, McAfee EPO
Timeline
Senior Security Analyst
CGI
11.2018 - Current
Security Analyst
Tata Consultancy Service
11.2015 - 11.2018
Network Engineer
Adecco India PVT LTD, WIPRO Technologies
06.2013 - 10.2015
Desktop Engineer, L2
PRIMACCESS TECHNOLOGIES PVT LTD
12.2010 - 06.2013
L2 Desktop Support Engineer
HCL Technologies
09.2009 - 12.2010
Hardware Engineer
Axiom Info Tech private limited
07.2008 - 01.2009
SIEM tool IBM Qradar – v 7.2.7, Galaxi Proxy Bluecoat – 9000-30 Model - undefined
BCA - Computer Science
Annamalai University
S.S.L.C - Electronics and communications
DECE Bharath Polytechnic college, Patel Nager Corporation High
Sec. School
CCNA Chennai - undefined
Cyber Security
CEH