Omkar Gundawar

About Omkar Gundawar

Security Analyst in Security Operations Centre (SOC) on Azure Sentinel for Global Client.• Perform Security SIEM Operational task – Analysis, KQL Queries, Active Channels, Reports, and Suggestion of the fine tuning on existing rules.• Monitoring and analysis of security events to determine intrusion and malicious events on SIEM (Azure Sentinel).• Working on incidents and reviewing the alerts and do detailed analysis on alerts. Escalating issues to next level and management when necessary.• Shift roster preparation and team management.• Good understanding of KQL Query language.• Performs Daily Health Check.• Regulatory requirements like (HIPAA, GDPR, PCI-DSS) are well known.• Exposure on preparing of SOC Process Document.• Work with engineering team in reducing the False Positive alerts.• Create a case in ticketing tool and assign it to the respective team based on legitimacy and SLA.• Investigate the security logs, mitigation strategies and analyze the logs to find the suspicious activities.• Knowledge of ITIL disciplines such as Incident, Problem and Change Management• Advise incident responders on the steps to take to investigate and resolve computer and internal application security incidents.• Perform root cause analysis of incidents/breaches.• Preparing of Daily Shift Handover as per requirements. • Good Knowledge on IPS, IDS, TCP/IP, Security Concepts, WAN and LAN concepts, Routing Protocols.• Different types of cyber-attacks and mitigation are well known deception technology• OWASP10, MITRE attack, and Cyber Kill Chain are well known.• Maintaining Separate Tracker for True positive, Separate IOC tracker For Blocking IOCS in project Environment•Remain Flexible with 247/7 Shifts,Drafting Shift handover,Documentation Of alerts• Providing KT to New Joiners, Reviewing Closing Comments and Incident Documents Provided By L1.leading Shift with Junior resources• Monitoring customer mail box for off-SIEM alerts.•Creating a monthly and weekly Soc reports.• Usecase creation and Usecase fine-tuning according to client requirement • Dark web Monitoring using Cyble security solutions

Experience

1. Cyber Security Consultant

   Aujas Cybersecurity

   Jul 2024 — Present · Mumbai, IN

   currently working as a consultant in aujas cyber security (NSE-IT)

Education

• Progressive Education Society's Modern College of Engineering

  Bachelor of Engineering - BE

  2017 — 2021