Aishwarya J. Email & Phone Number

Vancouver, Bc, Ca

•Monitoring and analysis of security incidents using advanced SIEM tools.•Engineered a custom SIEM (Security Information and Event Management) solution that correlated over 100,000 security events per day, enhancing threat detection capabilities by 25% and reducing false positives by 15%.•Led 24/7 Cybersecurity Operations Center team, optimizing shift schedules and resource allocation.•Provided leadership and mentorship to junior analysts (L1 and L2).• End-to-end security incident response process, ensuring precision and efficacy in triage, containment, and recovery.•Detected and mitigated ransomware attacks on file servers, restoring data and implementing additional security controls within 24 hours.•Championed proactive threat mitigation strategies, leveraging EDR solutions to neutralize threats swiftly.•Developed comprehensive incident response playbooks and SOPs.•Utilized data visualization tools to generate insightful monthly reports on clients' security posture.•Conducted in-depth forensic analysis of security incidents, identifying root causes, and developing strategies to prevent future breaches.•Collaborated with SOC leadership to fine-tune use cases and refine SOPs for optimal performance.

•Worked in rotational shifts in a 24/7 operational environment with global clients and participated in on-call rotations as required, handling escalations from customers to process them further.•Improved and enhanced vulnerability detection and response capabilities to identify emergency events and incidents.•Conducted in-depth forensic analysis of security incidents leveraging Microsoft security tools to prevent future breaches.•Handled security incidents by correlating events from various sources and closing them within the defined SLA.•Exhibited strong communication skills to coordinate with different teams.•Dealt with day-to-day incidents that could be true positives and false positives.•Created handovers and post-analysis reports for incidents from initial detection through final resolution, presenting the findings for future reference.

•Worked on the resilient ticketing tool for incident management, creation, and closing, incident response activities like malware analysis and IPS events analysis.•Worked on log analysis, reporting, and incident investigation.•Engineered a comprehensive set of custom IDS/IPS rules on a 24x7 Security Operations Center (SOC) setup, reducing false positives by 25% and increasing the detection rate of genuine threats across an enterprise network with 5,000+ endpoints.•Detected and mitigated 150+ cybersecurity threats per quarter through continuous monitoring and analyzing of security events with SIEM tools, enhancing overall network security posture.•Monitored live alerts and events on the ArcSight console, WAF, Stealth watch, and FireEye.•Monitored events and alerts on different devices and blocked the IP address after analysis was done depending on online tools and device or network log findings.•Generated daily threat intelligence reports by analyzing network traffic patterns and conducting vulnerability assessments to proactively identify and mitigate potential security risks.•Identification of emerging security threats and intrusions with threat intelligence tools.