Mansoor E Email & Phone Number

United Arab Emirates

• Being part of MSSP organization, monitored SIEM(QRadar, ArcSight, Securonix) consoles for various customers and fine-tuned false positive alerts in generic and custom specific.• Reviewing alerts escalated by L1 team and assisting them in reporting triggered alerts.• Working in 24x7 SOC operations, which included detection, tracking, and analyzing incident alerts and generating daily, weekly, and monthly reports and preparing them in the proper format to share them with customers.•… Show more • Being part of MSSP organization, monitored SIEM(QRadar, ArcSight, Securonix) consoles for various customers and fine-tuned false positive alerts in generic and custom specific.• Reviewing alerts escalated by L1 team and assisting them in reporting triggered alerts.• Working in 24x7 SOC operations, which included detection, tracking, and analyzing incident alerts and generating daily, weekly, and monthly reports and preparing them in the proper format to share them with customers.• Creation of rules, reports, and dashboards in SIEM tools as per stakeholders requirements.• Providing advisories and configuring IOCs to block based on the client environment. Performing analysis for multiple phishing emails which are reported by end users.• Have exposure in monitoring Microsoft Windows Defender ATP, Brand monitoring on iZOOlogic platform. Assist in providing proper mitigation steps.• Prepared RCA document for security incidents thoroughly, maintaining accurate records of incident details, actions taken, and lessons learned for post-incident analysis and improvement.• Preparing and providing log stoppage devices list for customers.• Review of daily health Check : QRadar and their components. Troubleshooting non-reporting devices and maintain device status reporting Troubleshooting issues occurred on daily health check & system notifications. Show less

Dubai, United Arab Emirates

• Hands on experience to work as MSSP on Process and on Incident Management. Worked on multiple client's security monitoring at a time in shift . • Working on SIEM tool QRadar, Following alert handling and Escalation procedure. • Monitoring incident and Dashboards for any suspicious behavior , prioritizing incidents as per severity. • Worked on Azure Environment to correlate Azure AD logs with Splunk alerts. Performed phishing email analysis manually.… Show more • Hands on experience to work as MSSP on Process and on Incident Management. Worked on multiple client's security monitoring at a time in shift . • Working on SIEM tool QRadar, Following alert handling and Escalation procedure. • Monitoring incident and Dashboards for any suspicious behavior , prioritizing incidents as per severity. • Worked on Azure Environment to correlate Azure AD logs with Splunk alerts. Performed phishing email analysis manually. • Following Security advisories to protect against vulnerabilities and IOCs. Maintaining reports and trackers, as per daily, Weekly, Monthly basis Fine tuning of log sources to reduce noise and reduce EPS count. • Having working experience on ticketing tool services like JIRA,BMC-Remedy. • Taking follow up on open tickets as per SLA, checking resolution of recently resolved tickets1. Monitoring of Daily Backup in Night shift2. Cyberark Checklist Activity3. Check active Cyberark services4. Health check of Disk Space of all servers5. Chubbing of passwords6. Approving of request in Cyberark and also validating CRQ before granting access.7. Basic Cyberark troubleshooting activities based on user request- Unable to access Cyberark Page- Unable to connect to server- Password expired8. CPM Activity- Changing of passwords of handed over accounts to end users.9. Generating Cyberark Reports of Cyberark Activities10. Approving of Privileged Access Request.11. Approve, Rejection of Access Request of end users12. Validation of CRQ tickets against PAM Requests13. Daily Checklist14. Integration of Accounts15. Check Private ark Client Login16. Check Disk Space of Windows Server and PTA Server Show less

Dubai, United Arab Emirates

With extensive experience in Privileged Access Management (PAM) and Identity and Access Management (IAM), I specialize in defining access controls, managing user entitlements, and overseeing application credentials and user access policies. I have performed privileged access reviews, compliance reporting, and managed access control processes.My IAM expertise includes designing, developing, and documenting services such as Single Sign-On (SSO), self-service registration, workflows, user… Show more With extensive experience in Privileged Access Management (PAM) and Identity and Access Management (IAM), I specialize in defining access controls, managing user entitlements, and overseeing application credentials and user access policies. I have performed privileged access reviews, compliance reporting, and managed access control processes.My IAM expertise includes designing, developing, and documenting services such as Single Sign-On (SSO), self-service registration, workflows, user management, and role-based access control. I have also created detailed solution system design documents covering architecture frameworks, identity schemas, user interfaces, and process flows.In CyberArk, I installed and configured the Privilege Session Management Proxy (PSMP) in a production environment with load balancers on RedHat Linux 7.5. This setup secured root and super admin accounts while managing role-based access control (RBAC). I configured custom platform settings to meet enterprise compliance requirements and ensure a smooth user experience.I configured CyberArk Endpoint Privileged Manager (EPM) for least privilege implementation and credential theft protection across Windows and Mac desktops and Windows servers. I utilized CyberArk utilities like PADR, PA Client, PAR Agent, and more, implementing CyberArk policies and managing various account types.I implemented Privilege Threat Analytics (PTA) for risk-based strategies and automatic remediation. My work included troubleshooting issues with Privileged Session Manager (PSM), ensuring GPO compliance, and addressing RemoteApp and hardening issues.In BeyondTrust Password Safe, I led the onboarding of new applications, ensuring seamless integration into the PAM environment. I onboarded privileged accounts across Linux/Unix and Windows platforms and configured, managed, and optimized BeyondTrust Password Safe tools. I deployed and migrated new BeyondTrust appliances, applying upgrades, security patches Show less

Bengaluru, Karnataka, India

• Integration, Deletion and modification of accounts• Monitoring of Daily Backup in Night shift• Cyberark Checklist Activity- Check active Cyberark services- Health check of Disk Space of all servers• Chubbing of passwords• Approving of request in Cyberark and also validating CRQ before granting access.• Basic Cyberark troubleshooting activities based on user request- Unable to access Cyberark Page- Port issue- Unable to connect to server- WINSCP… Show more • Integration, Deletion and modification of accounts• Monitoring of Daily Backup in Night shift• Cyberark Checklist Activity- Check active Cyberark services- Health check of Disk Space of all servers• Chubbing of passwords• Approving of request in Cyberark and also validating CRQ before granting access.• Basic Cyberark troubleshooting activities based on user request- Unable to access Cyberark Page- Port issue- Unable to connect to server- WINSCP issue- Password expired• CPM Activity• Changing of passwords of handed over accounts to end users.• Monitoring of recording and taking strict actions• Monitoring of PTA Alerts and taking strict actions • Preparing PTA alert reports on monthly basis• Generating Cyberark Reports of Cyberark Activities Show less