Arun Kumar Email & Phone Number

* Monitor security events and alerts using SIEM (Security Information and Event Management) tools, IDS/IPS (Intrusion * * * Detection/Prevention System), and other security monitoring platforms.* Investigate and analyze security incidents, identifying the root cause, impact, and recommended remediation actions.* Conduct in-depth analysis of security logs, network traffic, and other relevant data sources to detect and respond to potential threats.* Perform real-time incident response activities, including containment, eradication, and recovery, following established procedures and guidelines.* Collaborate with the SOC Level 1 analysts, providing guidance and support in investigating and escalating security incidents.* Stay up-to-date with the latest security threats, vulnerabilities, and industry best practices to enhance incident detection and response capabilities.* Assist in the development and implementation of SOC processes and procedures, including incident response plans, playbooks, and escalation protocols.* Contribute to the continuous improvement of SOC tools and technologies, suggesting enhancements to enhance detection and response capabilities.* Provide timely and accurate reporting on security incidents, including the analysis of trends and patterns to support proactive security measures.* Participate in security incident post-mortem reviews to identify areas of improvement and recommend appropriate actions to prevent future incidents• Learned to use SIEM tools and other security software to monitor and detect potential threats.• Lead ad-hoc scans in response to critical incidents or specific security concerns, ensuring swift identification and mitigation of vulnerabilities.• Collaborate with cross-functional teams to prioritize findings from ad-hoc scans and implement remediation plans effectively.• Provided rapid vulnerability assessment reports from ad-hoc scans to aid in incident response and risk mitigation.• Well versed in concepts of cyber-attacks such as DDoS, SQL Injection, Ransomware attack and phishing attacks.• Having knowledge on web application security risks like OWASP top ten web vulnerabilities.• Integrations multifile feeds like windows, Linux, application and network security devices logs to SIEM tools for thread detection.• Analyzing the health check of the log sources integrated in the SIEM tools.• Give advice and guidance to staff on issues such as spam and unwanted or malicious emails.• Creating Reports on daily, weekly and monthly based on requirement.

• 

  Visvesvaraya Technological University

  Mechanical Engineering