Rishav Pipal Email & Phone Number

Noida, Uttar Pradesh, India

• Lead and coordinate incident response efforts, including detection, analysis, containment, eradication, and recovery for complex security incidents.• Using MITRE attack framework, for creating detection rules & monitoring strategies and for identifying & responding to threats by mapping detected activities to specific MITRE techniques.• Perform Phishing Email Analysis and Malware Analysis.• Perform advanced threat hunting using tools such as Sentinel and Defender for Endpoint.• Creating and finetuning content in SIEM: Correlation Rules, Dashboards, Reports etc.• Develop and implement security policies, procedures, and playbooks to enhance incident response capabilities.• Maintain Trackers: Privileged Accounts & Groups, Email Release Requests, Software Request.• Doing Quality Checks of Alerts, SLA, and Reports.

Pune, Maharashtra, India

• Responded to security incidents, conducting root cause analysis, and implementing containment and remediation measures.• Work with NOC, IT, and various business units to investigate & remediate security incidents.• Escalating cases to L3, Users, Device Owners, and OEM as per case requirements & Severity.• Vetting & blocking of IOCs, Getting from various sources like RBI & CERTIN.• Handling Ad hoc requests: Configure Dashboard, Finetuning Use cases, checking traffic Logs.• Brand Monitoring: Taking down Phishing: Sites, Twitter handles, Customer care numbers.• Threat Hunting and Threat Intelligence: Detecting malicious traffic and misconfigurations.• Providing weekly Security Advisory related to Vulnerabilities affecting internal devices & apps.• Creating Reports: Delivery, Security Appliances, Critical Device.• Device Health Checkup: Detecting stoppage of logs and reporting to admin team and OEM.• Log Volume Analysis: Detecting deviation in daily Log volume.• SIEM Component Handling: Monitor High CPU & EPS Utilization

Noida, Uttar Pradesh, India

• Responded to security incidents, conducting root cause analysis, and implementing containment and remediation measures.• Vetting & blocking of IOCs • Provide suggestions on fine tuning existing use cases.• Provide inputs in bridge calls for an ongoing investigation.

New Delhi, Delhi, India

• Monitor security alerts from the various SOC entry channels (SIEM, ITSM, & Email).• Provided first-level response, information gathering and analysis for security alerts.• Escalating complex cases to senior analysts.• Taking follow ups and closing the tickets based on the client response and Artifacts.