Isuru Rajaguru Email & Phone Number

Colombo, Wp, Lk

Sri Lanka

-Responsible for incident management-Responsible for SIEM engineering and overall improvement of the SOC-Conducting compliance related assessments-Conducting information security reviews-Process creation for threat hunting, incident response, use-case designing fine-tuning etc.

-Responsible for all incidents escalated from the blue team until case closure-Creating dashboard and performing analytics to detect threats and trends-investigating high priority incidents and performing RCA-Creating models, processes to smooth blue team operations-Initiating and Conducting War Rooms during high priority incidents-Conducting Table Top Exercises for clients

-Identify, Analyze and Respond to Cyber Threats-SIEM Use Case designing,Implementing and Fine-tuning-collaborating with other teams (Red team, GRC etc) to improve threat detection-Collaborating with clients bi-weekly to understand and action on any client siderequirements-conducting knowledge sharing sessions for team members

Sri Lanka

-Identify, Analyze and Respond to Cyber Threats-SIEM Use Case designing,Implementing and Fine-tuning (Logrythm)-Log Analysis (Windows, Linux, 0365, Firewall, IPS , EDR, WAF, DB, PAM, DOSsolutions etc)-Monitoring EDR dashboards (Crowdstrike, MDATP, carbonblack)-Threat Hunting using tools (Mandiant Redline)-Preparing Cyber Threat Advisory on Vulnerabilities, APT groups and attacks, Malwareetc.-Preparing incident Playbooks-Adhering to SLAs and Reporting.

-Deploying, Configuring and troubleshooting Fortigate and Palo Alto Firewalls-Configuring and troubleshooting layer 2 and 3 swtiches (Cisco, brocade, nortel etc)-Deploying and configuring access points (Ruckus, Uni-Fi etc)-Deploying Identity Management solution, HID

Orien City, Dematagoda

-Worked on Behavior Analysis tools (Cybereason)-Analyzing logs from various security solutions-Overall Threat Management-Adhering to SLAs and Reporting