Vishal Raut Email and Phone Number

Responsibilities : Managing cyber security operations in proactive and reactive way, covering the following areas,*Security incident response and management*LogRhythm - SIEM for Monitoring Active Offenses and Dashboards.*Palo alto Cortex XDR and XSIAM incident response and Administration*Using Darktrace Tool, monitoring the network activity and addressing the malicious activity.*Phishing protection and response using PhishEr and Darktrace Email Antigen *Creation of offline playbooks and SOPs*Vulnerability management*Security awareness*Monitoring mail flow and blocking malicious domains using Microsoft ATP.*According to client requirement worked on content development, created alerts and modified existing rules, create and manage Alerts, monitoring dashboards and reports for current threats.

Responsibilities:- Sr. Security Analyst· SOC operations· Administration, monitoring of the IBM Qradar /Arcsight SIEM tool.· Provide 24*7 Support in SOC Operations as a L2 and L3.· Monitor Devices, Services and their component's health and availability.· Preparing Daily/Weekly/Monthly reports.· Working on incidents analysis and incidents escalated by L1 team.

Responsibilities : Sr.Security Analyst – SOC operations• Administration, monitoring of the IBM Qradar SIEM tool.• Handled P1/P2 issues.• Add /Remove log sources. Troubleshoot issues with log sources or systems with vendor and report system defects as needed.• Creation of offline playbooks and SOPs.• Monitor Devices, Services and their component's health and availability.

Responsibilities : Project Engineer (Endpoint Threat detection and response)· Administration and maintenance of the Symantec Endpoint Protection in house and cloud infrastructure.· Monitoring threats, definition distribution, non-compliance.· Virus infection/outbreak containment.· Distribution/packaging of Emergency Symantec Endpoint Protection signatures/updates.· In McAfee EPO DAT version updates on Windows and Unix machines· Queries and Reports regarding the last communication status of the machines.· Troubleshooting any threat detected by the AV.· Checking and monitoring the security scans which are made to run as part of weekly On-access scan and On-demand scans. And making reports for the same.