Vankudoth Mirchilal
Senior Security Engineer
Hyderabad
Summary
Highly experienced Incident Responder with 9+ years of securing enterprise environments. Proven ability to lead Incident response efforts, conduct in-depth investigations, And implement effective security measures. Expertise in threat hunting, malware analysis, and security architecture. Passionate about protecting digital assets and minimizing business impact from cyber threats.
Overview
10
10
years of professional experience
6
6
years of post-secondary education
Work History
Information Security Analyst
Juniper Networks India Pvt Ltd.
07.2024 - Current
- Conducted in-depth investigations of security incidents, identifying root causes and implementing remediation measures.
- Performed malware analysis and reverse engineering to understand threat actor tactics, techniques, and procedures (TTPs).
- Proactively hunted for threats using SIEM and EDR tools for Identifying and mitigating potential security breaches.
- Automated incident response tasks using Python and SOAR platform.
- Collaborated with cross functional teams to implement security improvements.
- Contributed to the development of security policies and standards.
- Developed and delivered security awareness training to employees, to reducing phishing clicks.
- Mentored and trained junior incident responders.
Consultant (SOC Lead)
Genpact India Pvt Ltd
03.2023 - 07.2024
- Part of Global SOC Team handling clients across the Globe.
- Identifying repetitive false positive alerts and suggesting fine-tuning to decrease FPs.
- Providing RCA for major incidents and Handling client escalations.
- Sharing the analyzed reports to client on daily, weekly, monthly basis for giving a better insight on network activities.
- Providing KT to new joiners.
- Adverse knowledge in Documentations - High Level and Low level.
Senior Security Engineer
TATA Consultancy Services (TCS)
02.2022 - 03.2023
- Experienced SIEM Admin, working on Integration / Interruptions of log sources.
- Onboarding log sources and troubleshooting interrupted log sources by coordination with respective stakeholders.
- Create and fine-tune content in SIEM, Correlation rules, Dashboards, Reports, etc. Installing, updating, upgrading SIEM solution.
- Integrating with SIEM vendor to fix any issues related to SIEM.
- Supporting MSSP customers on SAOR technology and Vulnerability Management/VM. Integrating different security tools to SOAR platform using API's.
- Creating Playbooks based on the customer requirements.
Senior Project Engineer
WIPRO Technologies
11.2020 - 01.2022
- Part of Global SOC Team handling Wipro network across the globe.
- Experienced SOC Analyst with a demonstrated history of working on triaging security incidents, Incident Response, Log Analysis and Threat Hunting using hypothesis-driven investigation.
- Investigating potential endpoint compromise using EDR Tools Tanium, CrowdStrike and proactively hunting suspicious events based on MITRE-defined TTPs and performing in-depth analysis.
- Handling targeted/large Phishing campaigns from Threat Actors by finding and blocking IOCs as part of proactive measures.
- Identifying machines infected with malware and issue remediation based on the investigation results.
Lead Associate (SOC)
Genpact India Pvt Ltd
10.2018 - 11.2020
Security Analyst L1
SELLCRAFT Global Solutions Pvt. Ltd
11.2017 - 10.2018
- Experienced SOC Analyst, Real time monitoring and analyzing the security alerts triggered in SIEM and escalating incidents to respective teams.
- Responsible for specialized investigation, threat analysis and remediation in response to notifications from operators.
- Configure and Automated Mail to Ticket for critical attacks from ArcSight ESM/Express.
- Identifying miss configured policies and suggesting necessary changes. Providing RCA for the major incidents.
- Raising of incidents and closure as per the SLA.
Network Security Engineer
DHII Health Tech Pvt. Ltd
08.2015 - 09.2017
- Worked as Endpoint/Network Security Engineer.
- Supported 10+ customers on Firewalls, 10+ customers on Antivirus and 5+ customers on SIEM operations including shared and captive SOC.
- Excellent knowledge in networking and VM.
- Hands on installation experience on various operating system, Antivirus and application software's.
- Hunting for adversaries and identifying the TTPs of threat actors and mapping them against MITRE ATT&CK framework. Conducted security audits to identify vulnerabilities.
- Hands on configuration experience on various switches, routers and firewalls.
- Managing application and web control filters with both endpoint and gateway security products.
Education
M.Tech - CSE
Aarushi Group of Institutions
07.2013 - 07.2015
B.Tech - CSE
Ramappa Engineering College
06.2009 - 06.2013
Skills
Cyber Security
AWS
SIEM/SOC
SOAR
Vulnerability Management
Threat Hunting
EDR
Network Security
Endpoint Security
PowerShell
Python
Windows
Linux
DLP
QRadar
ArcSight
Splunk
Securonix
Simplify
Tanium
Falcon
CrowdStrike
TrendMicro
Vision one
Sentinel One
Trend Micro
Symantec
McAfee
NMAP
Wireshark
Nessus
Qualys
Cisco
Sophos
Juniper
Security awareness training
SIEM management
Threat intelligence
Vulnerability assessment
Incident response
Cloud security
CASB
Teraform
Certifications Training
- SECURONIX : 300 Certified SNYPR Security Analyst / Administrator 6.3.1
- CCNA - R&S, Security
- Cyberoam Certified Network & Security Professional (CCNSP)
- Completed SNYPR Bootcamp Online Classroom APJ.
- Completed the Technology Training on Cyberoam at partner level.
- Completed the Technology Training on CISCO at partner level.
Tools Technologies
QRadar, ArcSight, Splunk, Securonix, Simplify, Tanium, Falcon, CrowdStrike, TrendMicro Vision one, Sentinel One, Trend Micro, Symantec (SEPM), McAfee, NMAP, Wireshark, Nessus, Qualys, Cisco, HP, Sophos, SonicWall, Palo Alto, FortiGate
Timeline
Information Security Analyst
Juniper Networks India Pvt Ltd.
07.2024 - Current
Consultant (SOC Lead)
Genpact India Pvt Ltd
03.2023 - 07.2024
Senior Security Engineer
TATA Consultancy Services (TCS)
02.2022 - 03.2023
Senior Project Engineer
WIPRO Technologies
11.2020 - 01.2022
Lead Associate (SOC)
Genpact India Pvt Ltd
10.2018 - 11.2020
Security Analyst L1
SELLCRAFT Global Solutions Pvt. Ltd
11.2017 - 10.2018
Network Security Engineer
DHII Health Tech Pvt. Ltd
08.2015 - 09.2017
M.Tech - CSE
Aarushi Group of Institutions
07.2013 - 07.2015
B.Tech - CSE
Ramappa Engineering College
06.2009 - 06.2013