Anjali Nain

About Anjali Nain

Windows | Linux | CrowdStrike | Airlock | QRadar SIEM | ServiceNow • Managed EDR operations for 2100+ Windows/Linux servers using CrowdStrike Falcon. • Performed alert monitoring, triage, and initial investigation for malware, brute-force, policy violations, and anomalous behavior. • Executed containment actions: host isolation, file path blocking, policy updates, and application control decisions. • Handled Airlock whitelisting, trusted baselines, software approval requests, and exception management. • Conducted daily EDR agent health checks, identifying non-communicating endpoints and coordinating with Wintel/Linux/AWS teams. • Performed SIEM monitoring and log analysis using QRadar — validated alerts, investigated suspicious activities, and escalated verified incidents to L2/L3. • Supported log onboarding, verification, and correlation tuning to ensure complete visibility across servers and security tools. • Maintained 100% SLA compliance for incidents and SCTASK requests in ServiceNow. • Created monthly governance and compliance reports; contributed to audits by providing logs, policies, and configurations. • Collaborated with cross-teams to enforce endpoint policies and improve overall security posture.

Experience

1. Cyber Security Analyst (Soc Edr Siem)

   Wipro

   May 2022 — Present · IN

   Windows | Linux | CrowdStrike | Airlock | QRadar SIEM | ServiceNow • Managed EDR operations for 2100+ Windows/Linux servers using CrowdStrike Falcon. • Performed alert monitoring, triage, and initial investigation for malware, brute-force, policy violations, and anomalous behavior. • Executed containment actions: host isolation, file path blocking, policy updates, and application control decisions. • Handled Airlock whitelisting, trusted baselines, software approval requests, and exception management. • Conducted daily EDR agent health checks, identifying non-communicating endpoints and coordinating with Wintel/Linux/AWS teams. • Performed SIEM monitoring and log analysis using QRadar — validated alerts, investigated suspicious activities, and escalated verified incidents to L2/L3. • Supported log onboarding, verification, and correlation tuning to ensure complete visibility across servers and security tools. • Maintained 100% SLA compliance for incidents and SCTASK requests in ServiceNow. • Created monthly governance and compliance reports; contributed to audits by providing logs, policies, and configurations. • Collaborated with cross-teams to enforce endpoint policies and improve overall security posture.

Education

• Birla Institute of Technology and Science, Pilani

  Master of Technology - MTech

• MEERUT INSTITUTE OF TECHNOLOGY, BARAL, PARTAPUR, MEERUT

  Bachelor of Computer Application, Information Technology Project Management

  2019 — 2021