Pravin Kumar

About Pravin Kumar

Solid understanding of common network services and protocols. Good knowledge on cyberattacks and attack vectors. Working level knowledge on security solutions like Antivirus, Firewall, IPS, Email Gateway, Proxy, IAM, TI, VA Scanners, WAF etc. Basic knowledge on skills like Malware Analysis, Threat Hunting, Dark Web Monitoring Good understanding of various SOC processes like monitoring, analysis, playbooks, escalation, incident documentation, SLAs, client meetings, report walk throughs, bridge calls, RFPs, etc. Exposure to AWS cloud, cloud security, scripting (Python) and regex Keeping updated with the latest developments in the cyber security landscape. Deep dive analysis of triggered alerts using SIEM, SOAR and other analysis tools Acknowledging and closing false positives and raising tickets for validated incidents Assist IRT/SME teams in incident remediation by providing supporting data and recommendations Follow-up with incident response team for remediation Monitoring and troubleshooting Silent Log Sources Research, compile and organize monthly vulnerability reports Participate in weekly SOC meetings to discuss about raised incidents Conduct research (OSINT, US-CERT, CVEMITRE, NVD etc.) to generate new threat intelligence. Drafting shift hand-overs Participate in evaluation of XDR solution

Experience

1. Engineering Lead

   Persistent Systems

   Apr 2023 — Present

Education

• Vishveshwarya Institute Of Engineering And Technology

  Bachelor of Technology - BTech