Himani Dua

About Himani Dua

Experienced Information Security Analyst with over 6 + years in the IT and services industry, specializing in threat detection, response, and mitigation. Proficient in using advanced SIEM and EDR tools, including Splunk, McAfee, Falcon, CrowdStrike, O365, Netskope, and Forcepoint DLP. Currently an active member of a Security Operations Center (SOC) team, staying at the forefront of evolving security threats, attacks, and vulnerabilities. Adept at analyzing security data, implementing risk management strategies, and ensuring organizational security through proactive monitoring and incident response.Looking for:Challenging opportunities to leverage my skills in information security and contribute to organizations by enhancing their security posture and adding value through proactive threat management and risk mitigation.

Experience

1. Associate IT Operations

   Publicis Sapient

   Jul 2019 — Present · Gurugram, IN

   Currently working as an active member of SOC team for dealing with high priority case escalations.• Continuous monitoring of security alerts on Splunk Search Head, Forcepoint DLP, McAfee Skyhigh, Cloud security APP, O365, Netskope, Phishing email and on CrowdStrike as well and notify the same to relative stakeholders.• Collaborate with cross-functional IT infrastructure teams to provide guidance on security best practices, incident response and security awareness.• Perform deep-dive incident analysis to find suspicious or malicious activity by correlating data and relate all type of logs from various source and destination if a critical system or data set have been impacted.• Involved in threat hunting based on MITRE Attack framework on Splunk using knowledge of the current threat landscape, threat attack techniques.• Leverages emerging threat intelligence (IOCs, updated rules, etc.) to identify affected systems and the scope of the attack.• Fine tuning of SIEM alerts and security Policies to reduce false positive alert by using regex in DLP.• Creating the customized Polices in Forcepoint DLP and Netskope solution.• Monitor health of security devices managed by Global SOC.• Internal Security Training/WebEx session on new/existing security technologies.• To connect with third party vendors if any P1 issues Occurred in any SIEM Tool.• Keep up with daily monitor, report, document and follow up with the SMEs on skyhigh/Forcepoint alerts in respective shift.• Manage security alerts through all the phases of the process till closure, like respond to security incidents by following established incident response procedures to mitigate risks and minimize the impact.• Perform vulnerability tests to identify weaknesses and recommended remediation strategies.• Generating tickets for validating Incidents.• Elementary knowledge of Python Scripting.• Draft Shift Handover and Performed other duties as assigned.

Education

• Govt. Polytechnic College

  Diploma with 78.84%, Computer Engineering

  2013 — 2016

• Columbus High School, Hisar

  Schooling Matriculation from H.B.S.E board with 81.4%

  2012 — 2013

• Deenbandhu Chhotu Ram University of Science and Technology (DCRUST), Murthal

  Bachelor of Technology - BTech, Computer Science

  2016 — 2019