Surya Ravi Email & Phone Number

Bengaluru, Karnataka, India

•Manage 24X7 operations at SOC, including event monitoring which includes incident detection, tracking and analyzing on real time basis, with follow-up on any suspicious activity.•Identify and escalate confirmed incidents and their impact on the network and escalate them with all the information, evidence, and coordinate with multiple functional teams to mitigate the threat.•Directly contacting with customers during high-priority incidents, guiding them through the mitigation process to prevent further cyber threats.•Circulate the latest threat landscape on vulnerabilities, threat actors, CVEs, and IOCs to stakeholders. Ensure that indicators are added to the blacklist and devices are patched.•Preparing SOP's and knowledge resources for the team members.•Handle customer requests, such as historical log searches and fulfilling audit requirements, to maintain compliance and support client inquiries.•Generate and track tickets for suspicious incidents until closure, ensuring comprehensive incident management.•Prepare daily, weekly, and monthly security incident reports for record-keeping and future investigations.•Refine SIEM tool alerts by finetuning false positives and performing log stoppage activities to enhance alert accuracy.•Sharing Logger and ESM daily reports to SIEM Admin.•Share Logger and ESM daily reports with the SIEM Admin to maintain a consistent and updated threat landscape.•Prepare presentations for daily stand-up calls, keeping stakeholders informed and aligned with SOC operations.

Bengaluru, Karnataka, India

•Performed real-time monitoring, investigation, analysis, reporting, and escalation of security events across multiple log sources, ensuring proactive threat detection and resolution.•Acted as first-level support for all security issues, taking swift action on security incidents and identifying true positives versus false positives to prevent unnecessary escalations.•Monitored customer networks using ArcSight SIEM to identify security anomalies and ensure compliance with security standards.•Investigated and analyzed malicious phishing emails, domains, and IPs using open-source tools, recommending effective blocking strategies to protect network integrity.•Created tickets in ServiceNow, ensuring incidents were assigned to the appropriate teams and following up until closure for streamlined resolution processes.•Installed and upgraded ArcSight Connectors for robust integration and functionality, ensuring real-time data flow from multiple devices and platforms.•Integrated various devices with ArcSight, including Windows, Linux, Cisco firewalls, routers, and switches, enabling comprehensive visibility across the network.•Troubleshot log delivery issues and ensured consistent log flow to ArcSight from all integrated devices, maintaining accurate and complete log data.•Developed ArcSight content, including correlation rules, queries, reports, and dashboards, enabling efficient detection, tracking, and reporting of security incidents.•Raised confirmed security incidents to the relevant teams, ensuring timely response and mitigating potential threats through collaborative action.

Bengaluru, Karnataka, India

•Analyze real-time security incidents, determining true positives and false positives to ensure precise threat response.•Identify and monitor suspicious or malicious activities to proactively guard against potential security breaches.•Collect and update Indicators of Compromise (IOCs) from various threat intelligence sources to stay current on evolving threats.•Detect and assess security events to spot intrusions and malicious actions, reducing risk exposure.•Report confirmed security threats to the relevant teams for immediate resolution.