Experience

• 

  L&t smart world & communication

  Aug 2021 - Mar 2023

  Cyber security analyst

  • Monitored security alerts and logs using IBM QRadar to identify potential threats and security incidents. • Performed Event analysis, Threat hunting activities in a 24/7 environment with approximately 40k EPS.• Handled 100+ Incidents per month and adhered to the agreed SLAs and MTTR matrix.• Performed Vulnerability assessment using BeSECURE tool on 50+ servers and generated Vulnerability assessment reports along with the mitigations.• Investigated alerts generated by the EDR platform in the environment having 4.5k+ Endpoints to identify and assess security incidents, malware infections, and unauthorized activities.• Designed and developed custom playbooks, workflows, and automation scripts to streamline incident detection, investigation, and remediation which successfully reduced the human intervention in handling incidents by 50%. • Conducted continuous optimization and improvement of existing use cases and created Incidence response SOPs for 20+ Use cases. Show less

• 

  L&t technology services

  Apr 2023 - Jun 2024

  Cyber security engineer

  • Designed and implemented security controls and best practices for the client’s Microsoft Azure Cloud Environment.• Conducted security assessment and audit of the entire end-to-end IOT application’s cloud architecture hosted on Azure cloud to identify vulnerabilities and compliance gaps.• Successfully completed 2 POCs in the client environment using Aqua security tool to assess the security of the cloud native applications and cloud posture management.• Provided technical guidance and support to internal teams on cloud security best practices, threat mitigation, and incident response procedures by integrating the existing microservices architecture.• Learning and Adapting to the client environment quickly to provide vulnerability management and JIRA administration for 50+ tickets every week.• Successfully generating 5+ SBOM documents adhered to FDA and HIPAA guidelines and providing the guidance to product teams on fixing the detected vulnerabilities in the SBOM document.• Contributed to the enhancement of the organization's threat intelligence program by proposing improvements to processes, tools, and methodologies.• Actively used Recorded Future Threat Intel tool to monitor the external threats targeting the Medical Device manufacturers industry and provided measures for hardening the security.• Successfully Identified the Activities of a Team-TNT threat actors as part of the Purple-team activity and generated aggregated reports using PlexTrac tool. Show less

• 

  F5

  Jun 2024 - now

  Security engineer 2