Harish Shinde Email and Phone Number

• Managing Security Operations Centers, ensuring the confidentiality, integrity, and availability of enterprise systems and data.• Developed and implemented security policies, standards, and procedures to ensure compliance with industry regulations and internal requirements With the help of Governance Team• Implemented a comprehensive incident response program, including defining escalation procedures, coordinating with external stakeholders, and conducting post-incident reviews.• Managed the security awareness and training program, ensuring employees were educated on security best practices and policies.• Developed and maintained relationships with external vendors and security partners to leverage their expertise and services.• Provided regular reports and updates on security incidents, trends, and emerging threats to executive management.• Monitoring Critical devices like NGFW Firewall, CISCO Umbrella, NGAV (Crowd strike), and Zscaler Proxy.• Following with technology towers to remediate the incident if required• Prepare Investigation Report Form for major incidents• Analyzed Phishing and Spam emails and notifying to the users and respective team.• Handled of incident investigation, management, and escalation.• Provided Incident Response support when analysis confirms actionable incident.• Ensuring incident identification, assessment, quantification, reporting, communication, mitigation and monitoring.• Responsible for team, overall use of resources and initiation of corrective action where required for Security Operations Center.• Creation of Daily, Monthly reports for Information Security operations and presentation to the Management.• Co-ordination with stakeholders, build and maintain positive working relationships with them.• Conducted daily/Weekly team meetings to review incident status, issues and challenges to provide support.• Mentored junior staff and interns.

Experience on Qradar SIEM Tool.• Integration for Windows and Linux devices.• Monitoring IDS/IPS alerts.• Analyzing traffic such as Web traffic, Mail traffic, Scan traffic, etc.• Client Reporting of Incident response/Intrusion attempts via web portals.• Analyzing Firewall logs for attacks.• Informing the clients about the Threat in terms of its severity, Impact and available Solutions to neutralize its effect on their Network.• Provided regular reports and updates on security incidents, trends, and emerging threats to executive management to clients.• Conducted daily/Weekly team meetings to review incident status, issues and challenges to provide support.• Mentored junior staff and interns.

Raise incidents by identifying Real-time traffic/logs captured by SIEM solution(HP Arcsight)• Monitoring Critical devices like Firewall, IDS/IPS, Router, Switch, PIM, DLP & Lancope analyzing them.• Perform first level of investigation to decide whether raised events are actual incident or false positives• Following with technology towers to remediate the incident if required• Prepare Investigation Report Form for major incidents• Fine tuning infrastructure by removing unwanted traffic• Identifying threats/attacks by real-time monitoring/dashboard• Creating custom filters/correlation rules, dashboards for different scenarios• Change and Problem management• Working with Hp Service Manager for raising service calls

• Patch Management, Vulnerability Assessment Reports.• Experience on RSA envisions SIEM Tool.• Part of Integration team for Windows, Linux, Routers, and Firewall with RSA envision.• Upgrading Patches on RSA envision.• Monitoring IDS/IPS alerts.• Analyzing traffic such as Web traffic, Mail traffic, Scan traffic, etc.• Client Reporting of Incident response/Intrusion attempts via web portals.• Analyzing Firewall logs for IDS/IPS attacks.• Blocking ip’s as per requirement, with the help of Network team.• Informing the clients about the Threat in terms of its severity, Impact and available Solutions to neutralize its effect on their Network.• Good working knowledge in Arcsight Administration & Monitoring.

Technical Support