Pavan P

About Pavan P

Cyber Security engineer with a demonstrated agile experience in Microsoft Security Products - Azure Sentinel, Microsoft Defender, MDI, MDE, MDCA, XDR.Experience in deploying and managing Azure security center. Skilled in working on Azure recommendations, log analytics workspace data and alerts produced from ASC.Triaging security incidents with relevant teams and proactively hunting threats based on threat intelligence and hypothesis driven hunting scenariosExperience in analyzing logs generated by both endpoints and network devices using Splunk Enterprise Security. Creating correlation rules and fine tuning false positives for effective SOC monitoring.[Firewalls/IDS/IPS/DNS/Bluecoat Proxy/Antivirus logs]Hunting TTP\'s of APT groups and mapping them with the MITRE ATT & CK framework. Performing gap analysis for the identified tactics followed by creation of detection logicsExperience in analyzing the alerts generated by Microsoft Threat Protection suite [MDATP/AATP/O365 ATP/MCAS] and performing in depth analysis by writing KQL queries.Skilled in investigating, mitigating threats using EDR tool Microsoft Defender ATP and proactively hunting for threats lurking in the network by writing KQL queries in the advancing hunting module of Defender ATP. Analyzing alerts and incidents generated by cloud hosts with the help of Azure Security CenterExperience in handling phishing campaigns from several threat actors by finding and blocking IOC’s as a part of pro active measure. Skilled in investigating emails reported by end users and responding with appropriate recommendations using O365 Email ProtectionExperience in hunting four live APT actors and identified potential IOC\'s. Mitigated security breaches by proactively hunting the threat actors.

Experience

1. Solution Delivery Advisor

   Deloitte

   Feb 2024 — Present

Education

• Government Engineering college,Kushalnagar

  Bachelor of Engineering - BE

  2012 — 2016