Pooja J S

About Pooja J S

Good knowledge on the Computer Network,OSI layers, 1.TCP/IP protocols, different ports and protocols.2.Understanding of security concepts like CIA, Hashing, encryption and decryption.3.Knowledge on TCP 3-way handshake. 4.Knowledge on different types of malware and cyber-attacks.5.Better understanding of concepts like DNS, DHCP, ARP, and proxy servers.6.Knowledge on vulnerability Management.7.Better understanding of OWASP top 10 vulnerabilities.8.Good understanding of security solutions like EDR, Firewalls, IPS, IDS, Anti virus.9.Knowledge on commonly used logon types, windows event logs and IDs.10.Knowledge on SIEM and the functionality of different components used.11.Good Knowledge on Cyber kill chain and understanding of Mitre ATT & CK framework and TTPs.12.Hands on experience on SPLUNK tool and raise ticket for validation incidents.13.Collection of necessary logs that could help in the incident containment and security investigation.14.Triage security events and incidents, detect anomilies and report remediation actions.15.Recognize and investigate intrusion attempts differentiate false positive from true intrusion attempts.16.Escalate validation and confirmed incidents.17.Follow-up with incident response team for remediation.18.Drafting shifts hand-overs.19.Assist L2/L3 in reporting.20.Vulnerability assessment on critical assets.21.Creating reports, dashboards, alerts in SPLUNK.22.Analysis of phishing alert, Brute-force Attack, Ransomware.

Experience

1. Cyber Security Analyst

   ConnectWise

   Jul 2022 — Present · Bengaluru, IN