Balaji V Email & Phone Number

Nova Scotia, Canada

● Utilized Microsoft Sentinel SIEM/SOAR to actively monitor security alerts, logs, and events across the infrastructure.● Conducted initial analysis of security alerts to determine their validity and potential impact.● Escalated confirmed security incidents to senior analysts and followed established response procedures.● Proactively searched for potential threats and vulnerabilities using Microsoft Defender and other security tools.● Reviewed and analyzed security logs to identify patterns, anomalies, and indicators of compromise (IOCs).● Maintained detailed records of security incidents, investigations, and actions taken.● Worked closely with other SOC team members and security engineers to resolve security issues.● Stayed up-to-date on the latest cybersecurity threats, vulnerabilities, and mitigation techniques.

Canada

Monitored security alerts and incidents using various security tools, majorly Splunk as SIEM (Security Information and Event Management) systems, to identify potential threats and anomalies in real time.● Installed, configured, and maintained a wide range of security software and firewalls, including IDS (Intrusion Detection System), and IPS (Intrusion Prevention System), and leveraging the TCP/IP model to enhance the organization's security posture.● Regularly reviewed and assessed the effectiveness of malware analysis techniques, intrusion detection/prevention systems, SIEM, application access control, Antivirus, and other network component policies.● Monitored computer networks and systems proactively to detect and respond to potential security threats and breaches, ensuring the overall security of the organization's IT infrastructure.● Deployed and fine-tuned Snort, with industry-leading open-source intrusion detection systems, to actively monitor and analyze network traffic for potential security threats and attacks.● Conducted in-depth analysis and investigation of complex security incidents and breaches, leveraging advanced security tools, including EDR (Endpoint Detection and Response) and threat-hunting platforms.● Collaborated with SOC L1 analysts to mentor and provide guidance on security incident analysis, assisting in their professional development.● Led and coordinated incident response efforts, orchestrating the activities of cross-functional teams to effectively contain and remediate security incidents.● Utilized network traffic analysis tools and packet capture techniques to identify and investigate network-based threats and suspicious activities.● Developed and implemented advanced correlation rules and use cases in SIEM systems to improve the accuracy and efficiency of security alerting.● Conducted in-depth malware analysis using sandboxing and other specialized tools to identify and understand the behaviour of malicious software.

Bengaluru, Karnataka, India

Working on Sox audit project for the organization as an Internal auditor. Performed Sox compliance Audit and assisted IT Support audits for Global Clients.Identification of risks by testing the controls (ITGC), performing gap analysis, and administration of the execution team. Performed internal audit for Access reviews for Highly privileged user accounts (HPA) and Non-highly privileged user accounts (Non-HPA) on SAP applicationPerformed Quarterly HPA, Semi-annual HPAWorked around various ITGC controls like Managing change, managing access, Managing IT operations and Incident Management. Work closely with business partners to identify process improvements and leverage technology to automate and streamline existing processes.Provisioning / De-provisioning access for the users in Active directory groups.Attending walk-throughs for ITGC and Access reviews along with IT SOX Coordinator.Documenting work papers.

Bengaluru, Karnataka, India

● Contributed to the development of policies for data governance, ensuring data security, privacy, and compliance with relevant regulations.● Defined new data collection and analysis processes, streamlining data handling and enhancing the efficiency of security operations.● Conducted risk assessments and vulnerability analyses, identifying and prioritizing potential information security risks and proposing appropriate risk mitigation strategies.● Participated in incident response activities, assisting in the investigation, containment, and remediation of security incidents.● Played a pivotal role in implementing two different security projects that significantly enhanced the city's overall security posture, addressing specific and recent threat issues.● Monitored system logs, SIEM tool (QRadar), and network traffic in real-time, actively investigating and interpreting any unusual or suspicious activity. Offered timely recommendations for resolution.● Integrated data from different devices into the QRadar Environment, creating customized dashboards and reports for better visualization and understanding of security events.● Developed and enforced organization-wide Policies, Procedures, and Metrics, providing network and host-based security measures for each host within the organization.● Conducted thorough testing on systems and applications to identify potential security weaknesses and vulnerabilities, taking proactive steps to address and mitigate these risks.● Conducted initial triage and analysis of security alerts, determining their severity, and escalating critical incidents to the appropriate SOC team members.● Assisted in the implementation and maintenance of security technologies, including IDS/IPS, firewalls, antivirus, and endpoint protection tools.● Collaborated with SOC L2 and L3 analysts to investigate security incidents, gathering relevant data and providing essential context to aid in the incident response process, security analysis, documentation