Mukesh Kumar Patel Email and Phone Number

In my role as an analyst, I successfully managed and maintained below critical tools as administrator across the CMI, Canada, and APAC regions, supporting approximately 9 customers and ensuring seamless functionality and optimal performance.SIEM (ArcSight):•Set up ArcSight for various operating systems and security devices, including installation and configuration.•Integrated ArcSight with different log sources (e.g., firewalls, servers, network devices, applications) to collect and process log data. Write parser for integration of custom applications.•Addressed log stoppages to ensure consistent log flow.•Designed and implemented Incident Management Frameworks (IMFs) for SOC (Security operation Center) to follow the procedure during incident.•Onboarded correlation rules (which follow the best practices and compliant with different regulations) and fine-tuned them for improved threat detection accuracy.•Managed log collection, storage, and retention.•Monitored security events and correlated them to identify potential threats. Also used Threat Intelligence to identify the malicious activity to generate the alert for further investigation.•Generated reports and created dashboards for visualizing security and health data.•Analyzed security incidents using Security Orchestration, Automation, and Response (SOAR) tools to find out any the gap and fill those gaps by finetune the rule on SIEM.SIEM (Splunk):•Conducted log analysis using Splunk, extracting valuable insights from log data.•Designed dashboards to visualize key metrics and trends.•Generated reports and set up alerts based on specific criteria for security threat and health alert.DAM (Imperva):• Deployment and Onboarding• Policy Creation and Fine-Tuning• IMF Creation• Integration with SIEMFirewall Analyzer (Tufin):•Utilized Tufin to analyze firewall configurations and generate reports.•Collaborated with the respective team to adjust rules based on best practices.