Ameer M. Email & Phone Number

⮚ Monitoring security events using Exabeam AA, DL, Azure sentinel (SIEM) and other TI feeds, looking for significant events, and processing reports of unexpected application, network, and cloud activity.⮚ Implemented and executed major incident management processes including invocation, ownership, escalation, communication, and service restoration.⮚ Experience building Incident response SOPs, playbooks, and policies based on the NIST framework.⮚ Established standards and procedures that maximized operation responses to encountered incidents and minimized service availability interruptions; contributed to a cross-functional team to ensure procedure manuals and incident playbooks were current and correct.⮚ Prepared documentation and reporting for the executive team on a weekly, monthly, and quarterly basis using ServiceNow tools and PowerPoint presentations.⮚ Prepared post-incident review documents and attended problem management review meetings to ensure the determination of root cause; prepared accurate, appropriate, and timely communication to internal and external stakeholders.⮚ Worked on Akamai bot manager and F5 SHAPE web application security tools.⮚ Worked proactively on Microsoft Defender for triaging and remediating EDR alerts.⮚ Trained SOC analysts and onboarded new alerts in Azure sentinel.⮚ Coordinated with internal and external law enforcement agencies, privacy, fraud, and HR teams when necessary

India

⮚ Responsible for detection and response to security events and incidents within global Fortune 500 client networks; utilizing ArcSight, Splunk, Tipping Point, Virus Total, IPVOID, FireEye, Wireshark, etc. ⮚ Review System and firewall logs based on individual preset client policies, rules, and standards; also review all host activity for a specified timeframe.⮚ Monitoring and investigating security incidents using multiple tools like Splunk, Defender EDR & EPO, and Proofpoint TAP.⮚ Ensuring compliance requirements are met by achieving SLAs.⮚ Handled and analyzed the Phishing and Spam emails reported by the users across the organization.⮚ Acted as a trusted point of contact and managed all the security incident response activities to mitigate or escalate as appropriate and work till the closure.⮚ Conducted detailed investigation and identified indicators of compromise on incidents such as TIA, ETP Domain DNS request, and User behavioral analytics (UBA).⮚ Identified common false positives and made suggestions on tuning alerts.⮚ Good Understanding of the industry model such as Cyber kill chain.⮚ Experience in monitoring Firewall, Web Proxy, Windows, DNS, Email Proxy, IPS logs⮚ Creating and Preparing SOPs for standard procedure.⮚ Creating Daily, Weekly, and Monthly reports and presenting to clients⮚ Knowledge of Python and RegEx.