Prashanth Y Email & Phone Number

 Extensive experience in conducting threat and data analysis. Experience in conducting trainings and user awareness programs. Experience on reporting, tracking and remediating incidents. Experience in creating POCs for various security products. Identifying Security gaps and suggesting ways to cover it. Experience with handling incidents like IOC, DLP, Malware, Phishing, publicly exposed data, Threat Hunting, AWS cloud related cases, etc. Experience with SIEM (Arc Sight, Splunk), creating rules, event, and flow analysis.Responsibilities: Performing Root Cause Analysis on high severity cases and Identifying Security gaps and suggesting ways to cover it. Responsible in handling Threat Scenarios, Exploits, Vulnerabilities & Mitigation Strategies. handling incidents like IOC, DLP, Malware, Phishing, publicly exposed data, Threat Hunting, AWS cloud related cases, etc. Handling Customer queries and escalation on anything related to my team. Handled Cloud platform alerts such as AWS Guard duty and Azure cloud app security.  Analysing the security logs with respect to the Log source type such as Access logs, SSH logs or cloud trail logs. Also Checking the Network connections (Flows) To/From the host.  Hands on experience with the tools such as Splunk, XSOAR, Proofpoint, Symantec ATP, Stealth watch, Data Bricks, Crowd Strike EDR and Nessus (Tenable). Participate in multiple projects and activities associated with technologies and processes designed to protect Company assets from current and/or emerging threats. Creating documents, knowledge bases related to Arc Sight and event monitoring for fresher/team reference. Responsible for leading security intelligence team operations which primarily focuses on security incident, monitoring/analysis/Reporting/Mitigation/Intelligence generation from the available logs/correlations. Monitor of the multiple network and security devices to ensure appropriate system administrative actions, investigate and report on noted irregularities. Investigating indicators of compromise (IOCs like file hashes, IP addresses, domains, etc.). Sending SOC advisories to the clients regarding the current threat and patch on regular basis, Based on CVSS 2 base vulnerability score. Weekly/Monthly incident analysis reports and submitting the highlights/Lowlights to the management.