Pavan Kumar Chimmana Email & Phone Number

Pavan Kumar Chimmana is a Security Analyst at Mphasis at Mphasis.

• 

  Security Analyst

  Mphasis

  Aug 2018 - Present - Chennai, Tamil Nadu, India

  • Working in Security Operation Centre (24*7), monitoring SOC events, Detecting and Preventing Intrusion attempts.• Real-time monitoring of Network Security devices such as IPS, Firewall, Endpoint Security, Operating system, Email security, etc. to correlate the logs as per client's requirement and also notify for log stoppage.• Recognize successful attempts of cyber intrusions and compromises through log review and analysis of relevant event detail information. • Development of Reports and Dashboards in ArcSight&QRadar.• Recognizing attacks based on their signatures.• Performing VA on both Web applications and servers.• Understanding phases of ArcSight ESM event life cycle and describing the functional processing which occurs during each phase.• Using AV and other analysis tools to perform Malware Analysis and complete removal of malware from the client's environment.• Differentiate the false positives from true intrusion attempts and help remediate/prevent them. • Support escalation and work closely with stakeholders as required.• Document all actions were taken during incident investigations.• Work closely with other teams to support the incident management process.• Provide tuning and filtering recommendations to engineering teams.• Support requests for data by the customer and other teams analyzing daily weekly and monthly reports.• Research, analysis, and response for alerts; including log retrieval and documentation• Monitoring and carrying out second-level analysis incidents.• Analyze and investigate the alerts in the SOC monitoring tool to report any abnormal behaviors, suspicious activities, traffic anomalies, etc.• Conduct analysis of network traffic and host activity across a wide array of technologies and platforms.• Assist in incident response activities such as host triage and retrieval, malware analysis, remote system analysis, end-user interviews, and remediation efforts.