Karamvir Kumar Email & Phone Number

As an entry-level SOC analyst, I am passionate about cybersecurity and eager to launch my career in the Security Operations Center. Armed with internship in SOC Analyst, I have acquired knowledge in SIEM, network security, and incident response. My commitment to continuous learning and a strong dedication to safeguarding digital assets drive my desire to make a meaningful contribution to the field. I'm excited to collaborate with experienced professionals and grow within the dynamic landscape of cybersecurity.

• 

  Soc Analyst Trainee

  Soc Experts

  Jul 2023 - Present - Bengaluru, Karnataka, India

  ● Monitoring the Customer Network using ArcSight and Splunk SIEM● Act as first level support for all securities issues ● Performing real time monitoring investigation analysis reporting and escalations of security events from multiple log sources● Raising true positive incidents to the respective team for further action● Creating ticket on service now and assigning it to the perspective team and taking the follow-up until closer● Escalating the security incidents based on the client’s SLA and providing meaningful information related to securities incidents by doing in-depth analysis of event payload, providing recommendations regarding security incidents mitigations which in turn makes the customer business safe and secure.● Investigate a malicious phishing emails, domains and IP’s using Open Source tools and recommend proper blocking based on analysis● Installing ArcSight connectors ● Upgradations of ArcSight connectors ● Integration of new devices with ArcSight such as windows, Linux, Cisco firewall, routers, switches etc ● Doing the trouble shooting if any device is not sending the logs to the ArcSight.● Creation of ArcSight content like Correlation Rules, Query , Report, Dashboards etc ● Maintain keen understanding of evolving internet threats to ensure the security of client networks. ● Troubleshooting SIEM dashboard issues when there are no reports getting generated or no data available. ● Good knowledge of Splunk Distributed cluster Architecture ● Working experience in Splunk SPL queries ● Integrated FortiGate Firewall with Splunk ● Installing Splunk apps and Addon on the Splunk ● Monitoring real time incidents in the Splunk Enterprise Security