Mukesh Gupta Email & Phone Number

Mumbai, Mh, In

Vashi,Maharashtra, India

Managing Security incident/Alerts tickets through the ticketing tools JIRA & XSOAR, initiated from different endpoint devicesand various cybersecurity tools such as AWS Guard Duty (Threat intel),Cybereason,Crowdstrike (EDR tool) and Splunk.Producing a SQL injection IDS report for our data centers in Dallas and Chicago using Palo Alto (IDS). Investigating alertswith the SIEM Tool (SPLUNK) for Windows Events, and addressing alerts triggered by Microsoft ATA alerts.  Furthermore, conducting an analysis of malware alerts in Crowdstrike through the examination of attack treesand system timelines specific to the malware to monitor its activity. Subsequently, confirming and addressingissues with end users on their systems to prevent any compromise of the corporate environment.Utilize Phishport & Counter Adversary Operations (Recon) to counter domain abuse & org logo abuse byindividuals registering Morningstar domains through manipulation, employing tools such as Recorded Future toDetecting and catching false Morningstar domain,logo individuals. Additionally, monitor emails using Proofpoint.Using Victor-ops to see on call person for remediating any critical event or incident

Thane, Maharashtra, India

As a cybersecurity professional, I am responsible for ensuring the integrity and security of our company's systems and data. I handle and escalate alerts (𝐋𝐨𝐠𝐑𝐡𝐲𝐭𝐡𝐦) based on protocol, keeping a vigilant eye on any potential threats. I also send daily reports on model breaches (𝐃𝐚𝐫𝐤𝐭𝐫𝐚𝐜𝐞) to the CISO, ensuring that critical and suspicious incidents are promptly addressed. In addition, I carefully evaluate quarantined emails (𝐃𝐚𝐫𝐤𝐭𝐫𝐚𝐜𝐞/𝐄𝐦𝐚𝐢𝐥) to determine which should be released and which should be flagged as malicious, while also monitoring employees' emails sent to personal IDs for any signs of data loss. Furthermore, I review scan results (𝐑𝐚𝐩𝐢𝐝7 𝐈𝐧𝐬𝐢𝐠𝐡𝐭𝐕𝐌), create reports on vulnerabilities and patches, and prioritize them based on severity, creating tickets for patching as needed. I also investigate alerts (𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭 𝐃𝐞𝐟𝐞𝐧𝐝𝐞𝐫) that are common with Darktrace or related to its model breaches, and track the activities of offboarded users (𝐌𝐢𝐜𝐫𝐨𝐬𝐨𝐟𝐭 𝐏𝐮𝐫𝐯𝐢𝐞𝐰/𝐒𝐭𝐞𝐚𝐥𝐭𝐡𝐀𝐮𝐝𝐢𝐭) to prevent data loss.

Navi Mumbai, Maharashtra, India

Created scripts and developed test cases to sanitize both web applications and API's. Extensively used GET, POST, PUT, DELETE methods for API testing in POSTMAN and identified issues in Front End Code using SonarCube. Developed my own CRUD testing application using MERN stack (MongoDB, Express, ReactJS, NodeJS) and REST based API. - Optimized Performance Dashboard for the Enterprise Department by fixing bugs in the source code and making enhancements in the UI. Additionally, implemented Manager/Departmental Level org hierarchy in the Performance Dashboard.

Mumbai

Thane, Maharashtra, India

Expertise in Cybersecurity Data Loss Prevention & Microsoft product Defender and and Endpoint for identity.Network Scanning (Nessus, Nmap) and Exploitation (Metasploit). Knowledge of Malware Scanning Trojan Attacks, Backdoors, Spyware, Malware, and Reverse-Connecting Trojans.  Proficiency in Packet Sniffing, including understanding the 3-Way Handshake (SYN & ACK Flags) using Wireshark. Understanding of WPA/WPA2 Authentication, Cracking Techniques (e.g., Fluxion), and Data Encryption (Symmetric, Asymmetric) with Public and Private Keys.Experience in Vulnerability Testing, and Demonstrations of DoS and DDoS (TCP & UDP Flooding).

Bachelor Of Technology - Btech, Computer Engineering, 7.75 Cgpa

Btech - Computer Engineer, 7.75 Cgpa

Higher Secondary School, Hsc : 70%

School, Ssc :- 84%

Cybersecurity Expert, Information Security, A+

Activities and Societies: CompTIA Security plus,CEHV11, CISSP, CCSP, COMPTIA NETWORK PLUS