Prashant Sharma

About Prashant Sharma

Experience in leading a team, preparing roster, reports, and management. More than 8 years of overall experience in SOC/SIEM/cybersecurity management on different projects. Experience in different types of threat hunting. Understanding of SOAR, collaborating, and helping to implementation team for implementing the new setup. Worked on business use cases for SOC monitoring with the SIEM team. Experience in business requirements of application onboarding on the SOC platform. Real-time threat monitoring and analysis, perform incident handling, provide recommendations, add Customer Context, tune search criteria, and update SOC processes and procedures. Experience reviewing raw log files, and analysis with Tuning/Designing of Correlation rules to reduce false positives and to generate the alerts/offenses/notifications for the attacks. Experience in creating new dashboards and reports. Working on Security attacks and bypass simulation for attacks such as Denial of service (Dos/DDos), Brute force, zero-day attacks, etc. to ensure Authentication and access control. Analysis on top suspicious signature triggered in our infra. E.g, SQL Injection, Cross Site Scripting, Scanning, etc. Experienced with multiple SIEM tools like Qradar, Exabeam, LogRhythm, and ArcSight.

Experience

1. Technical Specialist

   HCLTech

   Sep 2021 — Present · Noida, IN

   Handles administration and configuration in ArcSight. Helping into making strategy in BU. Time to time interactions with client to clear their doubts. Use case and report creations. Dashboard maintaining. Handling team leads responsibilities. Collaborating with SOAR team to implement new setup and taking assessment and training. Analysis and investigation of various Raw Logs captured in the Security incidents and alarms and escalating the threats or risks to respective device owners or stakeholders. Raising security incidents and change requests CR with firewall and network team to block suspicious and malicious IP addressed on the network. Meeting the SLA with highest level of accuracy and quality benchmarks. Ticketing Tool: BMC Remedy. Experienced in deployment and monitoring of Antivirus security tools like SEPM and McAfee. User/policies management and control for SEPM and McAfee. Policy configuration and changes in Palo Alto.

Education

• Teerthankar mahaveer university

  Bachelor of computer applications, Computer Science

  2011 — 2014

• Nanak Chand Adarsh Inter College Chandausi

  hsc, Mathematics physics

  2008 — 2009

Skills

• Telnet
• Dfs
• Vmware Vsphere
• Lan
• Vtp
• Access Control
• Citrix Xendesktop
• Vmware Esx
• Vmware Server
• Samba
• Wds
• Dns
• Yum
• Active Directory
• Ssh
• Ccna
• Citrix
• Dhcp
• Remote Access
• Nfs
• Wan
• Trunking
• Tcp/Ip
• Mcsa
• Permissions
• Vmware Vcenter
• Udp
• Vlan
• Red Hat Linux
• Switching
• Ip
• Nat
• Ipv4
• Citrix Xenapp
• Stp
• Dns Server
• Router Configuration