Monika Takhi

Senior Systems Security Specialist @Deloitte

Handled P1 alerts for SIEMs - QRadar, Splunk, LogRhythm, and ArcSight and contributed to maintaining the systems security.\\\\n- Documented the processes and procedures and created multiple playbooks for the Junior Teams to address the P1 issues including silent critical assets, WinCollect agents, and performing the changes including Geolocation updates, new rules creation, rules tuning, Apps upgrades, firmware upgrades etc.\\\\n- Gathered and complied the monthly storage capacity and uptime reports for all the SIEM clients to evaluate the amount and the types of the events coming in the SIEM and further provide the recommendations to the clients for the improvements in their Infrastructure.\\\\n- Provided 24/7 On-Call support to the clients to deal with the after-hours High Severity issues and delivered them the resolution in a timely manner, preventing any SLA breaches.\\\\n- Organized and lead multiple teams as well as the client meetings to prepare for the organizational plan as well as the opportunities to provide the best infrastructure and deployment to the client with the integration of the new managed hosts in the SIEM.\\\\n- Bestowed with the multiple awards and recognitions for the team-spirit, spontaneity to response and the leadership skills.\\\\n- Handled multiple SIEM client onboarding projects with the log sources integration, health monitoring rules, QRadar Apps, access to all the users with different security profiles, and the connectivity of the Client network with Deloitte.\\\\n- Represented the Infrastructure Team in the annual Auditing for the company and provided the requested information with the details of the security posture of the devices.\\\\n- One-on-One Meetings with the CSAMs and the Clients for the discussion of the ideas for improvement such as event retention policies, different threat hunting tools, WinCollect upgrades etc.\\\\n- Actively participating in the Bootcamp programs to learn technologies like Sentinel, Cloud (GCP and AWS) and management skills (CISSP).\\\\n \\\\n\\\\n \\\\n \\\\n\\\\n \\\\n