Teja

Security Analyst

Capgemini

Bangalore

10.2019 - Current

Extensive knowledge of Splunk architecture and various components and Passionate for Machine data and operational intelligence.
Developing the analytical rules in the Splunk SIEM to detect security incidents from the available log sources and working on the incidents for resolution.
Good knowledge and working experience in central logging, log management, and Splunk SIEM architecture.
Experience in performing host-based analysis and artifact analysis using the EDR solution Crowd Strike.
Experience in working on host isolation and advanced threat analysis using the Crowd Strike.
Experience in performing threat hunting across the organization's network, along with in-depth investigation and support for incidents escalated in SOC.
Hands-on experience with automated malware analysis systems (AnyRun, Hybrid Analysis) in the SOC environment.
Experience in performing network packet analysis and malware analysis in support of security investigations and incident response (IR).
Good hands-on experience in developing and maintaining effective documentation, including response playbooks, processes, and other supporting operational material.
Good knowledge of MITRE ATT&CK, DoS/DDoS, ransomware, and other cyber security threats.
Experienced in preparing detailed analysis for external cyber threats for new vulnerabilities, exploits, and Intrusion patterns and malware behaviors based on the information, proactively checking with the vendor to deploy the signatures for collected IOC's.
Experience in analyzing phishing/malicious email campaigns to identify IOC's and contain those IOC's.
Experience working with spam and malware detection and blocking techniques.
Experience in investigating instances of malware and determining attack vectors, payloads, and the extent of associated damage and data exhilaration.
Experience in working on adhoc scan requests and monthly vulnerability report by using Nessus
Hands-on Experience in Firewalls, IDS/IPS and DLP devices.
Experience in Auto Quarantining emails from user mailboxes.
Experience in email traffic analysis and malicious activity detections.