Dharshanraj M N Email & Phone Number

Abu Dhabi Emirate, United Arab Emirates

SIEM: QRADAR, CORTEXEDR: CrowdStrike, Microsoft Azure Sentinel and Defender.Email Gateway: ProofpointXDR:CyberEye.1. Responding and managing Security incidents and breaches as Appropriate.2. Tracking and following up of incidents closure with concerned teams.3. Optimized threat detection capabilities by expanding the use of SIEM tools (QRADAR, ArcSight) and EDR Platforms, resulting in enhanced real time monitoring and proactive threat mitigtaion.4.Security log analysis to detect attack origin, attack spread, attack behavior and attack details.5. Identify the security weakness in customer network and make recommendation for improving security posture.6. Respond to the Client queries related to threats identification and remediations.

Bengaluru, Karnataka, India

SIEM: AIsaac, ArcSight.EDR: CrowdStrike.Email Gateway: Proofpoint, Trend micro.My roles and responsibilities includes: - Real time security event and incident monitoring along with L1 level analysis of incidents.- Case and Ticket creation for suspicious events/incidents and tracking the closure.- Escalation/resolution of critical incidents as per SOPs or knowledge base.- Monitoring of security tools availability and health monitoring and escalation of issues as per SOPs and knowledge base.- Complete understanding of SIEM tools like Arc Sight and Splunk (Architecture, Creation of Dashboard, Creation of Reports and Active lists and generation of reports).- Good knowledge on Installation of connectors, troubleshooting of log stoppages and troubleshooting the connector’s issue.-Checking log stoppages on the daily basis and communicating with customers till the issue resolves. - Cooperate with L2 team for fine tuning of the use cases if it is required.- Creation of weekly reports and sent mail to customer and periodic report creation according to client request.- Creation of Run Books for new types of alerts in SOC environment.- Understanding of phishing email header analysis using MXToolbox.- Monitoring EDR alerts in "Crowd Strike" dashboard.- Dropping mail to customers regarding Flooding alerts.-IP blocking at firewall level with the Auto Remediation process.

Bengaluru, Karnataka, India