S. RAMESH KUMAR
Bangalore
Summary
Sr. Technical lead (SOC) HCL (Deployed to GE Health care & IBM Taiwan) with total of over 14 years ten months of experience in successfully delivering the Quality solution as customer needs and Cyber security.
Overview
6
6
years of professional experience
5
5
Languages
Work History
Sr.Technical lead (HCL)
HCL
- Cooperated with developers to design test cases for regular maintenance and enhancements for internal applications
- Executed functional testing of 100 test scenarios on XGS applications for SOC monitoring
- Worked with JIRA & service-Now for test case management for SOC
- Involved in various testing types like regression testing and integration testing
- Experience in logging test cases into Jira
Sr .IT Security specialist
Ericsson India
05.2016
- ArcSight Log Reviewing, analyzing case, Operating experience in ArcSight and L2 & L3 Support
- Incident, Change and Problem Management of Operation Center
- Analyzing suspected/infected files, with extended support from most AV vendors
- Managing team size of 5 individual day today operation as shift Lead
- Working on Arc sight SIEM tool, to monitor the logs of various devices connected to it, supported over 80+ clients, along with McAfee IPS and Snort IDS for monitoring Real time logs
- Event analysis: Responsible for monitoring, analyzing and reporting the security events from devices like IDS/IPS, Firewalls
- Monitoring Symantec real time IPS logs, integrated with IBM Qradar envision
- Opening an Incident ticket and escalating to the concerned team for immediate action and remediation
- Assist in the usage of security monitoring tools to improve the security of the environment based on business use cases or changes in threat landscape, root causes from security incident response, or output from security analytics
- Investigate and resolve security incidents both independently and in collaboration with the wider SOC team, ensure accurate logs are made of all actions during incident response activities, and produce a final report detailing the incident timeline and perform root cause analyses, recommend process improvements, and write final post-incident reports
- Identify the threat activity by proactively generating correlation report on the collecting data from various sources
- Respond to support analysis inquiries and provide additional threat indicators and analysis, and present tactical and strategic data on threat indicators.
IT Security specialty
IBM
05.2010 - 05.2016
- Security management and compliance for US based Government Bank, and part of shared team
- Handle multiple accounts for different prospective in IT security
- Customers are from different domains like Mining, Real estate and IGA
- Part of shared Security Operation Center – SOC Review of events logs & validating with user
- Extended Information Security Advisory member for one of the US bank
- Working closely with Technical Executives from principle vendors like Symantec, McAfee TrendMicro, Customer Associate in solving and updating new definition
- Network / server Device Security Analysis & Management (across all Platforms)
- Security Assessing and identifying of Non Compliance
- Ticketing these non-compliance
- Remote Support for Data centers across globe
- Extended Information Security Advisory member for one of the US bank
- Main products Support are ISS VSOC/ Site Protector
- Configuring and troubleshooting ISS Site protector Console Manager, Managing Proventia and real secure products using Site Protector Managing and configuring ISS internet scanner using Site protector.
Education
Master of Business Administration (MBA) - IT & Finance, Marketing
Indian Institute of Advanced Management, Visakhapatnam, AP
Bachelors in business management (BBM) -
Andhra University, Visakhapatnam, AP
Skills
Compliance
Fire eye
Compliance
Malware/Fraud Investigation
SIEM tools
EDR & XDR
Manual & Automation application testing
Project management
Security Operations
Cyber Security Incident Response
Threat Hunting
Vulnerability Assessment
Risk and Compliance management
SIEM - ArcSight and QRadar
FireEye XDR (Fire Eye HX and Fire Eye NX)
Malware Analysis through Cuckoo Sandbox
Phishme for Phishing Email Analysis
Security Event Monitoring & Incident Analysis
Incident Management Using Ticketing tools: BMC Remedy & SOAR platform
Compliance
Career Experience
- HCL, Sr.Technical lead (HCL), 07/14/20 - 01/09/23, IBM Taiwan
- Health care Manufacture industry, SOC Specialist, 07/17/20 - 07/30/21, Bangalore
- Ericsson India, Sr. IT Security specialist, 05/2016 - 10/28/19
- IBM, IT Security specialty, 05/2010 - 05/2016
Current Employer
HCL
Current Designation
Sr.Technical lead (HCL)
Personal Information
- Total Experience: 15 years
- Passport Number: E3724263
- Gender: Male
- Marital Status: Married
Additional Skills - Certification
CEH V7, ITIL V3, ISO 27001(LA,LI)
Disclaimer
I declare that the above specified details are true to the best of my knowledge and belief.
Timeline
Sr .IT Security specialist
Ericsson India
05.2016
IT Security specialty
IBM
05.2010 - 05.2016
Sr.Technical lead (HCL)
HCL
Master of Business Administration (MBA) - IT & Finance, Marketing
Indian Institute of Advanced Management, Visakhapatnam, AP
Bachelors in business management (BBM) -
Andhra University, Visakhapatnam, AP