Ramesh Kumarasamy Email & Phone Number

Chennai, Tn, In

Pune, Maharashtra, India

• Analyzed latest threats and provide protection coverage for various technology stacks of Symantec endpoint security product• Performed attack chain analysis of threat family/actor, map to MITRE ATT&CK TTPs and identify protection gaps• Efficacy improvement of endpoint detection in comparative tests and third-party reviews• Good understanding of Threat Hunting process and tools of the trade

Pune Area, India

• Led Global Incident Response (Operations) for False Positives reported for Symantec Products.• Analyzed PE, OLE/PDF, APK files and other scripts• Provided thought leadership to growth and innovation in team. Planning, execution and grading via OKRs• Assess and apprise technology stakeholders and senior management about the FP Landscape.• Perform RCAs and drive discussions to convert identified issues into new product requirements and improvements• Designed and developed automation systems like Automatic FP handling system, proactive FP identification system, whitelisting system, malware analysis system using Cuckoo, etc. using Python.• Performed visualization and analytics of FP data using ELK stack to identify and analyze FP trends and issues. This allowed Symantec to proactively address FP issues for customers and reduced cost• Developed machine-learning based clean file classifier using python and Weka. This resulted in ~10% reduction in false positives reported by Symantec customers• Responsible for people and process development.

Chennai Area, India

• Managed the Threat Research team• Responsible for team deliverables, project planning, tracking and delivery to customer• Responsible for hiring, training and performance assessment of employees in the project• Defining processes and policies for the project• Reviewing and approving advanced signatures developed by the team before delivery

• Led a team of threat researchers who are responsible for analyzing malware samples and creating detection definitions for an anti-spyware product• Have been involved in behavioral analysis and classification of malware samples. Proficient in writing malware descriptions, developing and testing malware detection signatures etc.

Behavioral analysis of malware such as worm, trojan, adware and spyware using various monitoring and analysis tools. Performing basic code level analysis. Writing Virus Descriptions. Developing and Testing malware signatures.

Business Administration And Management, General

B.Tech, Information Technology