Rahul Roy 🇮🇳

Experience

• 

  Craw Security

  Oct 2021 - Apr 2023

  Cyber Security Analyst

  • Implemented Splunk Universal Forwarder on Windows and Linux systems for log forwarding, enhancing visibility into security events. Integrated with Splunk to streamline data ingestion, contributing to comprehensive security monitoring and incident response capabilities.• Implemented a ServiceNow ticketing system within a lab environment to simulate SOC Level 1 operations. Created and managed incident tickets, efficiently prioritizing security incidents and requests. Logged and tracked incidents for timely resolution and escalation according to predefined protocols.• Implemented a security monitoring and vulnerability management system utilizing Wazuh Server, Elastic Stack, and Wazuh agents deployed across Windows and Linux systems. The objective was to achieve real-time threat detection, log analysis, and vulnerability assessment.• Installed and deployed the Qualys Virtual Scanner Appliance and accessed it via the Qualys Cloud Platform. Utilized Qualys for vulnerability scanning management and remediated identified vulnerabilities.• Detected deprecated software on a Windows machine, remediated the vulnerabilities, verified the software was no longer vulnerable.• Utilized Wireshark to analyze network traffic, identifying anomalies like suspicious activity and protocol errors, strengthening troubleshooting skills.• Implemented projects utilizing VirusTotal and Any.Run for malware analysis and threat intelligence. Conducted comprehensive scans and analysis of suspicious files and URLs, contributing to threat detection and mitigation efforts.• Utilized FireEye Mandiant for IOC analysis, enhancing threat detection and incident response. Generated reports, applied mitigation strategies, improving cybersecurity skills.• Utilized Autopsy and FTK Imager for digital forensics investigations, extracting evidence and generating detailed reports to support findings, contributing to cybersecurity practices. Show less

• 

  ESec Forte® Technologies

  Jun 2024 - now

  SOC Analyst