Swathi Reddy Email & Phone Number

Toronto, Ontario, Canada

• Lead security monitoring and incident response efforts, utilizing tools like Azure Sentinel, Splunk, and SentinelOne to detect and mitigate threats.• Conducted in-depth investigations into advanced security incidents, including targeted attacks and insider threats, using CrowdStrike and FireEye.• Enhanced SIEM capabilities by creating and tuning custom detection rules in Splunk and IBM QRadar, improving the accuracy and efficiency of alerts.• Performed regular threat-hunting activities with the use of FireEye and CrowdStrike, identifying and neutralizing potential threats before they could cause harm.• Worked extensively with cloud security tools like Microsoft Defender for Cloud and AWS Security Hub to secure multi-cloud environments.• Conducted vulnerability assessments using Tenable.io, collaborating with teams to prioritize and remediate identified risks.• Automated routine security tasks through scripting in Python and PowerShell, reducing manual effort and improving response times.• Integrated new security tools such as Zscaler and Fortinet Security Fabric into the existing SOC environment, enhancing overall security posture.• Managed incident response for phishing attacks, leveraging email analysis tools and strengthening phishing detection rules.• Performed continuous monitoring and analysis of network traffic using tools like Wireshark and tcpdump to detect anomalies and prevent data breaches.

Hyderabad, Telangana, India

• Monitored and responded to security alerts using SIEM tools like IBM QRadar and Splunk, ensuring quick identification and resolution of incidents.• Conducted analysis of potential security incidents, including malware infections, phishing attempts, and unauthorized access, using tools like FireEye and CrowdStrike.• Assisted in the configuration and maintenance of security tools, including firewall rules and IDS/IPS settings with Palo Alto Networks and Fortinet.• Performed vulnerability scanning and assessment with Nessus and Tenable.io, coordinating with IT teams for patch management and remediation.• Developed and updated security playbooks in Python to improve incident response times and ensure consistent handling of incidents.• Gained experience in cloud security by monitoring Azure environments for suspicious activity and securing cloud configurations using Azure Security Center.• Provided detailed reports on security incidents, summarizing root causes and actions taken, using data visualization tools like Splunk and Kibana.• Automated routine tasks such as log collection and analysis through PowerShell scripts, reducing manual effort and speeding up response times.• Performed network packet analysis using Wireshark to investigate potential security breaches and unauthorized access attempts.• I regularly collaborated with the vulnerability management team to prioritize and remediate critical security vulnerabilities, ensuring that our systems were aligned with industry best practices and compliance requirements.• I have also contributed to the development and refinement of security playbooks, helping to standardize response procedures for common incidents and improve overall incident management efficiency.