Adonis Thokalath Sunny

Experience

1. Senior Associate

   EY

   Mar 2022 — Present · Trivandrum, IN

   Handling Security incidents which may be High, Medium or Low criticality.Correlating logs from different SIEM tools and arriving at a conclusion by involving DLP, Security Monitoring and Malware analysis.Worked with MDE, Carbon black, Splunk and Symantec endpoint security & ThreatGrid for content inspection and a contextual security analysis.Effectively utilizing Microsoft Defender for Endpoint to detect, analyse, and remediate security incidents in real time.Worked with MDE, Carbon black, Splunk and Symantec endpoint security & ThreatGrid for content inspection and a contextual security analysis.Effectively utilizing Microsoft Defender for Endpoint to detect, analyse, and remediate security incidents in real time.Understanding the root cause of the security incident and presenting it to the top management with proper action plans of mitigation and remediation.Initiating IRT\'s like isolating endpoints hosts, blocking IPs & domains when malicious traffic is identified forcritical assets, disabling accounts when suspicious activities are identified, so that necessary remediationmeasures are implemented for true-positive cases.Engage in correlation rule tuning by suggesting appropriate filter changes for achieving high fidelity alerting.Provided feedback on security control capability gaps based off security intrusion trends.Analysing Phishing/Malicious emails using Threat Explorer and identifying the malicious content using end to end analysis including email header analysis (SPF, DKIM, DMARC, Message id and other parameters)Prepared and presented daily/weekly trend reports to the stakeholders, acted as peer group leader to help train support staff.

Education

• Dr. C. V. Raman University, Kota Bilaspur

  Bachelor's degree

  2013 — 2016

• University of Madras

  M.Sc Cyber Forensics and Information Security

  2016 — 2018

Skills

• Ceh
• Vulnerability Assessment
• Nmap
• Penetration Testing
• Tcp/Ip
• Wireshark
• Hacking
• Linux
• Snort
• Siem
• Vulnerability Scanning
• Netowrk Penentration Testing
• Unified Threat Management
• Cain & Abel
• Network Security
• Networking
• Security
• Security Audits
• Firewalls
• Vulnerability Management
• Information Security Management
• Information Security
• Computer Security