Avinash .T Email & Phone Number

Bengaluru, Karnataka, India

Bengaluru, Karnataka, India

> Having 2.6 years of experience as SOC.> Experience in 24*7 client and server support.> Monitoring and investigating security incidents triggered from Various Security Controls (By Following SOP’’s)> Conduct in-depth investigations into alerts and anomalies to determine the root cause and potential impact on the organization's security> Assist in incident response activities, collaborating with L2 & L3 analysts. > Follow SOPs for incident containment, eradication, and recovery.> Document all actions taken during incident investigation and response.> Providing timely incident reports.> Monitoring and Investigating user reported Phishing emails.> I play a central role in coordinating incident response activities, working closely with different teams to ensure a smooth> Actively utilize security tools such as EDR, Email Gateway, Proxy, DLP, WAF, etc., for the analysis of network traffic and system logs.> Monitor the health and availability of the SIEM platform, ensuring that it operates optimally to support security monitoring activities> Evaluate alerts to identify false positives and eliminate noise, ensuring that We focuses on genuine security threats.> Apply additional context to events and alerts, correlating information from various sources to understand the broader security picture.> I prioritize and categorize incidents, ensuring that critical ones receive immediate attention.> Fine-tune SIEM rules and configurations based on analysis and feedback to improve the accuracy and relevance of generated alerts. and effective response to security incidents.

Bangalore Urban, Karnataka, India

In the journey so for I have learnt,------------------------------------------------Security Solutions like Firewall, IPS, IDS etc.,Network devices like hub, switch, routers. Knowledge on Networking : NAT, PAT, OSI Model, TCP/IP, Protocols, MAC address.Credential based attacks: Brute-Force, Dictionary attack, Birthday attack, Rainbow table, Pass-the-hash.Network based attacks: DOS, DDoS, ARP Spoofing, Sniffing, MITM, ICMP flood attackGood Knowledge on MITRE ATT&CK and Cyber Kill Chain.Understanding on Security concepts like AAA, MFA and CIA.Basic Knowledge on Vulnerability management, Incident Life cycle.Servers : DNS, DHCP, Email server.-----------------------------------------------------SIEM : Splunk Threat Intel Tools : IPVoid, VirusTotal, URLVoid.