• In-depth understanding of networking concepts, network architecture and networking devices.• Good grasp on Endpoints and Network security solutions.• Encompass of security tools, threats remediation methods and best practices.• Working level knowledge on security solutions like antivirus, firewall, IPS, Email Gateway, proxy, IAM, TI, WAF etc.• Understanding of cryptography, encryption, hashing, PKI, certification industry and digital signature used in VPN.• Insight into social engineering techniques, different types of phishing used by adversaries.• Profound insight of technologies used such as- EDR, XDR, MDR, ETP, DLP, PAM, CASB ,CSPM , CWPP, CNAPP.• Assimilative understanding of vulnerability life cycle, IM, risk management.• Comprehensive understanding using frameworks and compliances like NIST, CIS Critical Controls, HIPAA, GDPR, GRC, PCI-DSS, ISO27001.• In-depth understanding of security threats (preferably OWASP Top 10 vulnerabilities), threat attack methods and the current threat environment.• Trawled through different cyber attacks and attack vectors, bot, botnets, amplification attacks, semantic attacks and volumetric DDOS attacks.• Deep dive on Cyber Kill Chain &MITRE ATT&CK framework Track threat actors and associated tactics, techniques, and procedures (TTPs) and understanding of different attack groups.• Cognitive approach on Threat Hunting, Vulnerability Assessment, Malware analysis, Dark Web Monitoring.• Exposure to AWS cloud, cloud security, Shell Scripting, Python Scripting, Bash Scripting .• Trained in Security Operations from SOC Experts.• Participated in the agile process to incrementally drive improvement in triage process, reduce time to detect & response, use case fine tuning, metrics.• Deep dive analysis of triggered alerts using SPLUNK and other analysis tools. Performed Operational task- Analysis, Filters, Reports, and Alerts.• Working knowledge on creating reports, dashboards and alert creation• Acknowledging and closing false positive and raising tickets for validated incidents.• Follow-up with incident response team for remediation. Participated in cyber hunting to identify and eliminate known and unknown network threats.• Monitoring and troubleshooting silent log sources Understanding of various SOC processes like monitoring, analysis, bridge calls RFPs, etc.• Conducted research (OSINT, CVEMITRE, NIST, NVD etc.)to Generate new TI.•
