TOM PAUL MALIEKKAL
Summary
Dynamic Cyber Security Analyst with 4+ years at Tata Consultancy Services, excelling in incident detection and response. Proven track record in threat hunting and vulnerability assessments, optimizing security tools to enhance operational efficiency. Adept at programming and fostering collaboration, I deliver impactful solutions that fortify organizational defenses against evolving cyber threats.
Overview
4
4
years of professional experience
Work History
Cyber Security Analyst
Tata Consultancy Services
01.2021 - Current
- Developed and maintained custom correlation rules and use cases, meticulously fine-tuning them to optimize detection accuracy and minimize false positives.
- Conducted thorough investigations using SIEM tools to analyze security events and incidents, providing timely and accurate incident response.
- Spearheaded the creation of new use cases, aligning them with evolving threat landscapes, and business requirements.
- Automated routine tasks within the SIEM environment enhance operational efficiency and allow the team to focus on more complex security challenges.
- Formulated and executed advanced search queries within CrowdStrike to identify sophisticated threats, ensuring a thorough analysis of endpoint activities.
- Investigated complex detections and incidents, utilizing in-depth knowledge of CrowdStrike capabilities to analyze and understand the scope and impact of security events on endpoints.
- Developed and executed custom malware scenarios for controlled testing of EDR response capabilities, ensuring the resilience and effectiveness of the endpoint security infrastructure.
- Conducted an in-depth analysis of email-related security incidents, utilizing advanced email analysis techniques to identify and mitigate sophisticated phishing, malware, and other threats.
- Created and executed live attack scenarios, such as domain impersonation and two-factor authentication bypass, to test and validate the effectiveness of Proofpoint email security controls.
- Implemented and managed Netskope for Data Loss Prevention (DLP) and Cloud Access Security Broker (CASB) capabilities.
- Configured policies to monitor and control data movement within the organization and in cloud environments.
- Conducted assessments to ensure compliance with data protection regulations.
- Successfully identified and mitigated potential security threats through proactive threat-hunting efforts, preventing possible security incidents.
- Produced detailed reports outlining findings, analysis, and recommended mitigation strategies, contributing to the overall improvement of the organization's security posture.
- Utilized anomaly detection for various sandboxes, enhancing the organization's ability to identify and assess potential threats in controlled environments.
- Skilled in identifying vulnerabilities, analyzing security incidents, implementing robust security measures, performing relevant penetration testing, and leveraging automation tools and scripts to enhance security operations, and streamline processes.
- Responded promptly to cyber incidents by analyzing attack signatures, isolating affected systems, and restoring normal operations.
- Updated computer security policies and procedures upon learning of new risks.
- Assisted with developing strategies for responding to potential cyber attacks such as malware outbreaks, phishing campaigns, ransomware attacks.
Education
Bachelor of Technology - Electronics and Communication
Christ College of Engineering
Irinjalakuda09.2020
Skills
- Incident Detection and Response
- Incident Triage and Analysis
- Use Case Preparation and Implementation
- Advanced Dashboard Creation and Monitoring
- Complex Search Query Preparations for Advanced Investigations
- Penetration Testing and Vulnerability Assessments
- Real World Attack Simulation
- Threat Hunting
- Programming languages (Python, Java, C)
- Malware Analysis
- Tool Optimization and Customization
- Automation
Languages
- English
- Malayalam
Awards Activities
- Identified and responsibly disclosed critical security vulnerability to Bitdefender Antivirus company, 2019
- Acquired 5th position in CTF competition held at Centre for Development of Advanced Computing, Trivandrum, 2020
- Earned client recognition for crafting, building, and testing customized evasive malware, which notably remained undetectable by EDR systems., 2021
- Received client recognition for showcasing methods to bypass Email Security measures, 2022
- Special Initiative Award for conducting Infosecurity Fest, 2023
- Received client recognition for creation of new use cases and fine tuning of various rules, 2024
- Received 'Star of the Month' award for building critical dashboards and creating complex search queries using Crowdstrike Query Language, 2025
Timeline
Cyber Security Analyst
Tata Consultancy Services
01.2021 - Current
Bachelor of Technology - Electronics and Communication
Christ College of Engineering