Gurpreet Sidhu Email & Phone Number

Orangeville, On, Ca

Orangeville, On, Ca

• Maintained current knowledge of tools and best-practices in advanced persistent threats; tools, techniques, and procedures (TTPs) of attackers; and forensics and incident response.• Produced weekly written briefings and verbal presentations to all the security teams and disseminated ad-hoc executive briefings to senior leadership on important cyber incidents.• Conducted regular threat hunting investigations around malware, IOCs, vulnerabilities, and TTPs used by APTs and ransomware group such as Lockbit, Play, Blackbasta, Royal, and many more.• Performed attack simulation around known adversary TTPs to validate detection controls in Microsoft Defender products and to validate the KQL detection queries developed through threat hunting efforts.• Actively monitored and fine-tuned threat intelligence feeds within Anomali ThreatStream and integrated threat intelligence feeds with various security technologies to bolster organization’s cyber defenses.• Proactively assessed and monitored actively exploited vulnerabilities using Mandiant Attack Surface Management, Kenna Security dashboards and Nexpose scans to effectively track the number of assets and promptly escalate them for patching to minimize risks.• Tuned monitors in Mandiant DTM to actively track and identify stolen credentials, fraudulent domains, credit card forum postings, and vendor breaches on the dark web, enabling proactive threat detection and mitigation.• Actively monitored threat intelligence communities such as RH-ISAC, FS-ISAC, CCCS, and CCTX.• Supported SOC and Incident Response for large scale or complex security incidents by providing intelligence context and relevant threat hunting support.• Shared the latest social engineering campaigns with GRC and helped them build awareness posts for users.

• Produced tactical, operational, and strategic level threat intelligence reports that included analysis of cyber threats and actors in support of the team objectives.• Continuously evaluated changes in actors, tactics, techniques and targets to enhance threat scenarios and use cases and actively participated in threat intelligence communities.• Assisted with Vulnerability Assessments/Pentest activities such as Tabletop, Purple Team and remediated findings within and other business units/stakeholders.• Integrated Anomali threat intelligence feeds with different security technologies for proactive detection and blocking.• Customized dashboards in Kenna Security to accurately assess, track, and prioritize vulnerabilities.• Technical analysis of network activity, monitor and evaluate network flow.• SIEM monitoring to ensure efficient response to security alerts and work with the appropriate teams to investigate and triage.• Reviewed existing controls and processes to suggest improvements to enhance the security posture for technology systems and users.