Himanshu Goswami

About Himanshu Goswami

Cyber Security Professional at BT-Group - SC-900, CCNA Certified, Experienced Cyber Security, QA Analyst with a demonstrated history of working incident management and Response, Security monitoring.Skilled in SIEM Tools - Qradar, ArcSight, Splunk, Splunk SOAR, Crowdstrike, Simplify SOAR, SolarWinds Orion, ServiceNow

Experience

1. Cyber Security Professional

   BT Group

   Jul 2023 — Present · Gurugram, IN

   Currently serving as Cyber Security Professional, coordinating responses to complex security incidents with a focus on advanced troubleshooting. Perform advanced Phishing analysis and security event analysis using various tools (Qradar, Splunk, Splunk SOAR, Armor Anywhere, Trend Micro, Alert logic, Microsoft defender XDR, Email security tool, Microsoft O365, Wireshark, Crowdstrike, Azure AD, Intune endpoint, Menlo URL sandbox, PaloAlto Panorama). Quality assurance Analysis and Investigate escalated alerts, ensuring accurate threat identification and assessment. Enhance and fine-tune correlation rules through daily log monitoring. Conduct phishing website and email analysis with remediation. Analyze and remediate security advisories for CVEs and IOCs. Document detailed incident reports, including root cause analysis and lessons learned. Provide regular management reports (weekly & monthly) on security incidents, trends & KPIs. Deliver training and mentorship to junior SOC analysts. Contribute to the development and enhancement of SOC policies, procedures, and playbooks. Ensure adherence to established incident response protocols. Participate in table-top exercises and simulations to boost incident response capabilities.

Education

• Rajiv Gandhi Prodyogiki Vishwavidyalaya

  Bachelor of Engineering - BE, Computer Science