Sri Dhanush C

• Actively monitored and triaged security events using AlienVault Level Blue SIEM, ensuring timely detection and response to threats.
• Performed first-level analysis of phishing and malware incidents using Mimecast, Malwarebytes, and Cybereason.
• Created and managed incident tickets, escalating high-severity events to Tier 2 as necessary.
• Investigated suspicious endpoint activity using CrowdStrike and Carbon Black, identifying and mitigating potential threats.
• Maintained and enhanced daily SOC reports and operational documentation to support situational awareness and knowledge transfer.
• Conducted advanced investigations and root cause analysis leveraging AlienVault Level Blue, CrowdStrike, and Carbon Black.
• Led containment and remediation efforts for high-risk threats identified through endpoint and email security platforms.
• Executed proactive threat hunting across network and endpoint environments to detect and disrupt emerging threats.
• Tuned SIEM detection rules (Level Blue) to improve alert fidelity and reduce false positives.
• Investigated phishing and impersonation attacks using Mimecast threat intelligence and email forensics to prevent recurrence.

• Monitored and analyzed basic security alerts using AlienVault Level Blue SIEM.
• Assisted in phishing analysis and user email investigations via Mimecast.
• Helped update and maintain incident documentation and SOC playbooks.
• Shadowed Tier 1 analysts to understand real-time triage and incident handling.
• Observed endpoint monitoring activities using Malwarebytes and Cybereason.