Grace Susan

Experience

• 

  Wipro

  Aug 2015 - Sept 2017

  Project Engineer

  Part of SOC team with a dedicated banking client. Responsible for monitoring and reporting of security incidents within the network using the SIEM tool IBM Qradar. Identifying suspicious activity and attacks. Taking necessary action to prevent reoccurrence and suggest mitigation. Develop use cases to tighten the security of the entire network. Creation of daily/weekly reports on overall security threats and incidents. Performs Daily Health Check for security devices deployed across the network. Performing backup activity from various devices in the network.Previously, worked as part of Cyber Defense team for handling intrusions, security threats and malware alerts in Wipro network over 1,50,000 + end points. Monitoring anomalous behavior within the Wipro network with the help of various security controls implemented across the network for suspicious activity and take necessary steps to mitigate the threat. Identify the root cause of various security incidents observed, mitigate the threat and suggest methods to prevent reoccurrence.Collecting actionable threat intelligence to identify the latest security threats, in-the-wild malwares, recent APTs, exploit kits, newly discovered vulnerabilities and hunt for the same in the organization. Malware analysis on various commercial and open source sandboxing platform to understand the malicious behavior and create reusable IOCs which can be implemented in security controls.Analysis of malicious emails and attachments to identify zero day attacks/ unknown malwares and provide samples to create signatures to the vendor.Also worked as part of SIaaS project (Security Intelligence as a Service) monitoring and reporting suspicious activity observed in the client network to over 9+ clients. And also suggesting steps to mitigate the threat and prevent reoccurrence. Provide Inputs to L2 for the loopholes and help in tightening the overall security. Show less

• 

  IBM

  Sept 2017 - Feb 2020

  Security Specialist
• 

  EY

  Feb 2020 - now

  Security Engineering | Incident Response | SIEM

  • Manager Cyber Security

    Dec 2023 - now

  • Senior Security Consultant

    Feb 2020 - now