Rhydham Joshi Email & Phone Number

• Frugally build and scale Amazon Physical Retail (Amazon Go, Amazon Books, Amazon 4-Star, and other initiatives in the retail space) Security Operations Center (SOC) to protect against internal/external security incidents, minimize their impact when they do occur, and allow the business to accept reasonable risk via six core disciplines: 1) 24x7 Monitoring, Detection and Incident Response (MDIR); 2) Vulnerability Management (VM); 3) Threat Intelligence (TI); 4) Forensics; 5) Red/Blue Team Game Days; 6) Threat Hunting.• Build security detectors/detection signals on a SIEM to identify adversary actions on Linux, Windows, Networking and Security, and Embedded devices around User Authentication, System Authentication, User Management, System Management, System changes, System Errors, Service Changes, Service Errors, Unusual Command Execution, Process Anomalies, File Integrity Monitoring, and Network Traffic Anomalies (accepted & denied traffic). • Design Incident Response Plan (IRP) documents for applications to detect, respond to, and recover from security incidents.• Run the Security Game Day program to identify potential areas of improvement for reducing MTTD(mean-time-to-detect) and MTTR(mean-time-to-respond). • Operationalized * Endpoint Detection and Response (EDR) solution across the production fleet. • Build and operationalized a Monitoring and Detection solution for Linux OS based devices using open source technologies (rsyslog and auditd) and native log files (user.log, auth.log, and process info from /proc directory)• Assist and train other Amazon federated teams to build, maintain, and scale a Cost-Effective Security Operations Center(SOC). Interests:- Information Security,- Application/Product Security- Forensic Investigations,- Malware Reverse Engineering,- Penetration Testing- Cloud and Virtualization SecurityTools:- HPE ArcSight ESM- HPE ArcSight Logger- McAfee IPS/IDS- Symantec DLP- Zeek (Bro)- Snort- Suricata- Sguil- ELK- REMnux (Linux distribution for Reverse-Engineering Malware) - Kali Linux (Linux distribution for advanced Penetration Testing and Security Auditing)- Security Onion (Linux distribution for intrusion detection, enterprise security monitoring, and log management)

Listed skills include Linux, C, Information Security, Java, and 20 others.