Mukesh Kumar

Security Analyst

• Job Details:Monitor security alerts from various sources, including intrusion detection systems, EDR solutions and SIEM tools. Correlate and analyze events using the SIEM tool to detect IT security incidents. Follow detailed operational process and procedures to appropriately analyze, escalate, and assist in remediation of critical information security incidents. Ensure maturity and improvement of SIEM/security tools monitoring by providing insights and recommendations. Participate in knowledge sharing with junior analysts and contribute to internal knowledge bases through SOP documents. Support onsite and offsite CSOC operations based on customer requirements, including providing assistance for CSOC operations during the World Government Summit 2024 & 2025. Enhance security use cases by analyzing and providing insights into security logs to improve threat detection & response and suppressing false positives. Provide detailed monthly report to customers on SOC services. Automate security incident handling using FortiSOAR, reducing response time and improving operational efficiency.

SOC Engineer

• Job Details:Responsible for managing security incidents and developing response strategies for multiple enterprise customers, ensuring swift threat mitigation and minimal business impact. Responds to security incidents and conducts threat intelligence analysis to enhance cyber resilience and improve incident detection.

SOC Analyst

• Job Details:Identify and investigate high-priority SIEM offenses, correlating suspicious logs using tools for in-depth analysis and resolution. Developing use cases, create SIEM alerts and rules pertaining to environment. Ensure maturity and improvement of SIEM monitoring by providing insights and recommendations. Configure log sources as per requirement. Perform health checks for security devices on quarterly basis. Monitor end user activities using TrendMicro Apex One EDR, and ensure implementation of policies. Follow-up on incidents as per severity & criticality according to pre-defined SOPs. Manage administration of QRadar such as, upgradation, event parsing, maintaining event logs & flows data backup and retention and etc. Review is conducted daily for network activities and also verified and reconciled against valid request through SIEM reports. Conduct risk assessments for networks and databases as per organizational and compliance requirements to identify and mitigate potential security risks. Circulate security advisories to concern IT teams with remediations.