Karan Nayak

About Karan Nayak

A dynamic professional looking to apply diverse, cutting edge Data, Application, Cloud…

Experience

1. Security Engineer

   Rakuten

   Nov 2021 — Present

   Operating, maintaining, and streamlining Incident Response Program (IRP), Security Incident and Event Management (SIEM), automation, and authentication tools ·Providing counsel and guidance to the junior-level security operations personnel in the department ·Proactively identifying, containing, and mitigating vulnerabilities and providing metrics for reporting ·Managing and developing an incident response, threat modeling, threat intelligence, and threat hunting ·Help expand defense-in-depth security for the organization to protect critical IT assets and data from internal and external threats ·Assisting in the development, execution, and enforcement of security processes, policies, and procedures, developing company-wide best practices for security ·Analyzing potential infrastructure security incidents to determine if the incident qualifies as a legitimate security breach ·Monitoring and correlating security event log information to identify and detect anomalous activity ·Automating and documenting manual processes where practical ·Implementing techniques using the most advanced technologies to hunt for unknown threats in the environment ·Appropriately informing and advising management on incidents and incident prevention ·Participating in knowledge sharing with other analysts and developing solutions efficiently ·Creating and maintaining playbooks/documentation in support of ongoing tuning of the Security Orchestration and Automated Response tool ·Managing data intake for SIEM and ensuring all data sources are working effectively ·Partner with cross-organizational teams to address alert and investigation deficiencies ·Provide operational support, troubleshooting, and maintenance of Security related processes, controls, or products ·Collaborate with infrastructure groups, system owners, and end users to ensure effective and accurate implementation of security standards and policies