Mitva Patel Email & Phone Number

Woodbridge Township, Nj, Us

Atlanta, Georgia, United States

Led advanced threat hunting initiatives, utilizing Carbon Black to identify hidden threats, while developing automated response workflows with Phantom Cyber and Demisto.Utilized Splunk, Kibana, and custom queries to monitor key performance indicators such as mean time to detect (MTTD) and mean time to resolve (MTTR), presenting insights via comprehensive dashboards.Leveraged ThreatConnect APIs to enrich security alerts with contextual threat intelligence, while creating dashboards in IBM QRadar and Splunk to visualize external threat impacts.Automated routine reporting processes using Python and PowerShell, streamlining report generation and distribution for stakeholders.Facilitated cross-team collaboration with IT, threat intelligence, legal, and business units through Microsoft Teams to ensure alignment of security objectives.Conducted security awareness training for employees using KnowBe4 and led AttackIQ exercises to enhance incident preparedness and security culture across the organization.

Atlanta, Georgia, United States

Assessed and enhanced security monitoring systems using Splunk and Elastic SIEM, improving threat detection and response processes.Developed custom correlation rules leveraging the MITRE ATT&CK framework to optimize detection accuracy and minimize false positives.Supported the revamp of incident response procedures using NIST SP 800-61, integrating ServiceNow for streamlined incident management and tracking.Conducted and participated in tabletop exercises and incident simulations with Cobalt Strike to evaluate and improve incident response preparedness.Integrated external threat intelligence feeds using ThreatConnect and IBM QRadar, automating the ingestion and analysis of threat data for real-time decision-making.Contributed to threat hunting activities using Carbon Black, focusing on detecting and mitigating potential security threats before escalation.

Austin, Texas, United States

Led the integration of external threat intelligence from sources such as VirusTotal and IBM X-Force, enhancing detection capabilities through behavioral analytics with Darktrace and RSA NetWitness.Implemented encryption technologies including SSL/TLS and PGP for data protection, while managing endpoint security with Carbon Black and SentinelOne.Designed network segmentation strategies using Cisco ISE and VMware NSX to minimize lateral movement and secure sensitive areas.Extended security monitoring efforts to cloud environments, utilizing AWS GuardDuty and Azure Security Center to ensure comprehensive visibility.Conducted red team exercises using Cobalt Strike and Metasploit, simulating cyberattacks to validate security controls and response procedures.Automated security tasks using Demisto and Swimlane to streamline response processes, while implementing YARA rules and performing memory forensics for advanced threat hunting.

Austin, Texas, United States

Conducted regular vulnerability assessments using Nessus and Qualys, contributing to the enhancement of the organization's security infrastructure.Assisted in the implementation of SIEM solutions such as Splunk and IBM QRadar, aiding in the design of a threat monitoring architecture aligned with the MITRE ATT&CK framework.Supported network intrusion detection efforts by deploying and configuring Snort and Suricata and managing endpoint protection with CrowdStrike Falcon.Utilized Security Onion and the ELK Stack for continuous network monitoring, and contributed to the customization of alerting rules using YARA and Sigma for enhanced threat detection.Collaborated in monitoring system performance through tools like Nagios and Grafana, ensuring compliance with NIST Cybersecurity Framework and CIS Controls using Confluence and Jira for documentation.

Portland, Oregon, United States

Led the management of encryption technologies, handling AWS KMS, Azure Key Vault, and encryption protocols like TLS and AES-256 for data protection.Integrated external threat intelligence feeds from platforms like MISP and AlienVault OTX into security monitoring systems to enhance threat detection.Conducted real-time security monitoring with Amazon CloudWatch and Azure Monitor to identify and mitigate potential threats proactively.Automated various security processes using AWS Lambda and Azure Functions and deployed security controls consistently across environments using Terraform and Ansible.Implemented container security measures using Docker Security Scanning and AWS Fargate for secure cloud application deployment.Managed network security segmentation using AWS Security Groups and Azure Network Security Groups (NSGs) to control and restrict traffic based on workload sensitivity.Developed incident response playbooks and proactively hunted threats using log analysis and forensics techniques to ensure rapid threat mitigation.

Portland, Oregon, United States

Managed cloud security monitoring tools such as Splunk and AWS CloudTrail to track and log potential security vulnerabilities in cloud environments.Participated in incident response activities using IBM QRadar and AWS Security Hub, ensuring incidents were documented and tracked in ServiceNow ITSM for comprehensive follow-up.Assisted in managing and updating firewalls using Palo Alto Networks and Snort, ensuring security patches were applied regularly through AWS Systems Manager.Supported security audits by conducting vulnerability assessments using Nessus and Qualys, and helped align the organization’s cloud infrastructure with security frameworks such as NIST and ISO/IEC 27001.Contributed to the enforcement of endpoint security measures with CrowdStrike Falcon and Microsoft Defender ATP, helping to implement IAM policies via AWS IAM and Azure Active Directory.

Master'S Degree, Computer Science In Cyber Security

Bachelor'S Degree, Computer Science