Nishanth Dharuman Email & Phone Number

London, England, United Kingdom

• Working alongside our Threat Detection Engineers to design response actions to newly created detection rules.• Working closely with the SOC and Engineering teams to improve existing automations.• Researching and implementing new playbooks that can be used within the SOC.• Integrating new log sources and build playbooks to properly triage and respond to security incidents while reducing the time needed to analyse each event.• Documenting all system changes.• Deploying, maintaining and troubleshooting the XSOAR environment in GCP.• Integrating with external environments including CRM systems, messaging such as Slack and Teams and CMDB systems.• Working with the MCD team to deliver new service capabilities and functionality.

Delhi, India

I was Managing the XSOAR technology and working on all XSOAR activities for some leading customer’s security and its automation. My Responsibilities: • Learn & understand the customer’s business requirements and the threat landscape that is most applicable to their industry’s vertical sector.• Lead Cortex XSOAR technical implementation/operations in a customer environment.• Manage combination of Cybersecurity subject matter experts in engineering, operations and support areas to accomplish team goals.• Manage relationships with service vendors including our external Managed Security Systems Provider (MSSP).• Drive implementation and maturity of SOC capabilities.• Serve as a subject matter expert related to cyber threat intelligence.• Participate in use case development, provide technical input into designs, and maintain SIEM and SOAR use cases throughout their lifecycle including SOAR integration and contributing to playbooks.• Threat hunting and independent threat research to augment and feed custom use case creation• Leverage advanced knowledge of security operations, cyber security tools, intrusion detection, and secured networks to integrate with the SOAR platform• Develop and implement SOAR integrations including threat intelligence feeds, authentication systems, and response systems (firewalls, proxies, etc).

Delhi, India

Project summary : • Working on latest Threats and taking necessary actions such as building SIEM rules and designing automation for it. • Maintaining and providing technical expertise for the Security Orchestration, Automation and Response (SOAR) platform. • Collaborating with high profile clients to thoroughly evaluate security risks and recommend cost-effective preventative measures. • Developing playbooks, automation and orchestration content in support of SOC Operations. • Working on SOAR platform engineering tasks such as integrations, health monitoring and maintenance activities to ensure our customers and partners get the most out of SOAR. • Applying subject matter expertise to specific incident, security application or enterprise environment to improve security posture or resolve issues. • Leading SOAR technical implementation and operations. • Providing technical assistance during pre-sales by demonstrating our ability to excel in the delivery of our security operations. • Assisting customers with their Incident Response efforts leveraging Cortex XSOAR for Security Orchestration Automation and Response. • Taking reactive and proactive actions against cyber-threats and incidents. • Working with stakeholders to help define and drive the execution of the Cyber Security strategy.

Mumbai Area, India

My Responsibilities:- Threat Hunting- Creating and working on automation via Demisto - Working on EDR ( Crowdstrike ) alerts and taking immediate necessary steps for the alerts.- Creating custom IOA rules - Monitoring on logs of perimeter level tools and working on its trend- Creating and refining SIEM ( IBM QRadar ) rules.- Working on blacklisting and whitelisting applications. - Performing forensic analysis on the detected file or activity and find the root cause.- Taking immediate actions for all Antivirus ( Symantec , Mcafee , Trendmicro ) alerts of our internal devices.

Chennai Area, India

My responsibilities :-Performing Pre-Deployment and Post-Deployment testing for Comodo Products.-Updating our signature database for every 2 hours.-Identifying False positive and False negative deductions.-Giving verdict for files given by users in our forum page.-Maintaining our file database with most of the software products researched from different trusted sources.-Analyze and update our file database with each new software versions to achieve Zero unknown files on our customer end.-Blocking malware before it reaches the user end ( ZERO HOUR PREVENTION ).-Performing Malware analysis for the files submitted on Valkyrie Verdict System and Unknown file hunter.-Performing incident response activities such as malware analysis, remote system analysis.-Documenting all activities during an incident and providing leadership with status updates during the life cycle of the incident.-Analyzing a variety of network and host-based security appliance logs (Firewalls, NIDS, HIDS, Sys Logs, etc.) to determine the correct remediation actions for each incident.-Providing real-time guidance to customers on network configuration, security settings and policies, and attack mitigation procedures.

Engineer’S Degree, Computer Science And Engineering

High School, Computer Science