Muhammed Riswan

About Muhammed Riswan

I’m Muhammed Riswan K N, a SOC & Cyber Defense Analyst at Mantle Solutions, securing the large enterprise infrastructure of Lulu Group International. I support real-time monitoring and protection for 17K+ endpoints, 400+ firewalls, 200+ access points, and both Linux/Windows servers.I specialize in threat monitoring, incident response, and security operations, with hands-on experience in: • Cortex XDR for threat detection, investigation, and threat hunting • LogRhythm SIEM for log analysis, correlation, and incident triage • Fortinet & Forcepoint firewalls for real-time traffic monitoring and policy enforcement • Proofpoint for phishing prevention and email security • CloudSEK & HelpAG for digital risk protection and external threat monitoring • Endpoint, network, and server security across a large distributed environment • Ransomware defense & File Integrity Monitoring (FIM) • Secure remote access using Guacamole RDPI focus on improving detection capabilities, reducing risks, and strengthening overall cyber resilience through continuous learning and operational excellence.

Experience

1. Soc Analyst L2

   Mantle Solutions

   Nov 2023 — Present · Kochi, IN

   SOC & Cyber Defense Analyst experienced in monitoring large enterprise environments and securing thousands of endpoints, firewalls, access points, and servers->Skilled in handling security tickets, incident triage, alert validation, escalation, root-cause analysis, and accurate documentation->Strong in endpoint threat detection, investigation, behavioral analysis, and threat hunting using advanced EDR/XDR platforms->Proficient in SIEM monitoring, log analysis, event correlation, rule tuning, and identifying abnormal activity across networks and servers->Experienced in firewall and network traffic monitoring, detecting suspicious connections, intrusion attempts, lateral movement, and policy violations->Hands-on with email security, analyzing phishing attempts, malicious links, attachments, spoofing, and BEC-related threats->Knowledgeable in Digital Risk Protection (DRP), identifying impersonation domains, leaked credentials, brand misuse, and external threat exposure->Skilled in secure remote access monitoring, reviewing RDP activities, validating user sessions, and supporting controlled connectivity->Capable of vulnerability identification, risk analysis, prioritization, and coordination with teams to implement remediation efforts->Experienced in monitoring Linux and Windows servers, analyzing authentication logs, detecting anomalies, and validating system integrity->Familiar with ransomware defense techniques, File Integrity Monitoring (FIM), and detecting unauthorized or malicious file changes->Strong understanding of MITRE ATT & CK tactics, adversary behaviors, common attack vectors, and SOC operational best practices->Knowledgeable in endpoint security, network security, access control, identity monitoring, malware behavior, and threat intelligence concepts->Focused on continuous learning, improving detection capabilities, adapting to emerging threats, and enhancing SOC workflows and resilience.

Education

• Vaduthala Jamath Higher Secondary School

  Higher Study, Computer Science

• Vadutha Jamath High School

  High School

• APJ Abdul Kalam Technological University

  Bachelor of Technology - BTech, Computer science and engineering