Cyber Security Analyst
Current- Responding to and investigation security incidents, including forensic analysis, containment, and recovery as a successful team member in a 24x7 Cyber Security Operation Center (SOC)
- Leverage the power of Splunk to collect, search, filter, correlate, and visualize data to identify the Indicator of Compromise (IOCs) such as login attempts, file modifications etc. and take appropriate action to.
- Gaining valuable insight into security posture by using customize dashboards in CrowdStrike Falcon to investigate the incident further to determine the root cause and take additional actions as needed
- Provide advanced email analysis, such as header analysis, URL rewriting, and sandboxing feature in Proofpoint to analyze the email, identify threats, generate reports and alerts, and take necessary actions to prevent.
- Document the findings and actions in IBM Security SOAR (Resilient) to keep track of security incident by prioritizing based on its severity and impact. Effectively using Jira to assign the incident to a specific team.
- Performing vulnerability scanning using Tenable.io and NetSparker to identify the severity of vulnerabilities which need to be addressed first and develop a plan to remediate them
Apr 2023 - Present
