Lohithkumar S

About Lohithkumar S

Detailed phishing Analysis with email containing malicious files and URL>>Proxy logs analysis and suspicious files downloads analysis and educating users about security policies>>Real-time Incident and log monitoring in the Security Operations Centre from different devices such as firewalls, IDS, IPS, and Antivirus and EDR, operating systems like Windows, Linux, and Networking Devices>>Undergone Red Team assessment and efficiently responded to all incidents and observed suspicious activities>>Proficient in Kusto Query Language (KQL): very good at writing and optimizing queries to analyze large datasets in Azure sentinel, MS defender.>>Finding out potential false positives by analyzing the alerts & phishing analysis.>>Manual threat hunting to find a threat or incident in a network and prepare daily analysis Report and Proxy findings report.>>Configuration of Azure sentinel workspace and onboarding Log sources.>>Real-time Log monitoring on SIEMs, firewall appliances, intrusion prevention systems. Worked on Qradar, ELK, Azure sentinel and EDR tool.>>Whitelisting the false positive Incidents and finetuning the rules for better visibility of the suspicious Activity>>Investigating, analyzing events in Endpoint Detection and Response Tool, and then taking required action and Making sure tickets are being resolved within SLA.>>Providing investigation, triage, and mitigation of detected security events to prevent users from interacting with malicious content.>>Manual threat hunting to find a threat or incident in a network and prepare daily analysis Report and Proxy findings report>>Constantly monitoring of the dashboard, analyzing the alert triggered in SIEM tool (Sentinel, Kibana) on daily basis in rotational 24/7 turf.>>Good experience at malware analysis skills on both static and dynamic>>Provide information regarding intrusion events, security incidents, and other threat indications and warning information>>Technical analysis and evaluation of network flow and events>>Perform information security incident response based on risk categorization in accordance with established procedures>>Provided recommendations for security improvements based on incident findings and trend analysis.>>Trained and mentored junior staff on incident response best practices and tools.

Experience

1. Senior Technical Consultant

   IBM

   Oct 2024 — Present · Bengaluru, IN

Education

• Jain (Deemed-to-be University)

  Master of Computer Applications - MCA

• Bapuji Institute of Hi-tech Education, Davangere

  Bachelor of Computer Applications