Prem Sai

About Prem Sai

1.I am a passionate and results-driven SOC Analyst with over 4 years of experience in safeguarding data confidentiality, integrity, and availability. 2.Thriving in the fast-paced world of cybersecurity, I specialize in proactive threat hunting, incident response, and endpoint security. 3.My proficiency extends to leading-edge technologies, including Azure Sentinel, O365 Defender, EDR tools, and KQL queries, enabling real-time threat detection and mitigation.4.In my current role at Virtusa Consulting Services Pvt Ltd, I am immersed in the dynamic realm of a 24/7 SOC environment. 5.Responsible for monitoring and reporting alerts, handling diverse cybersecurity incidents, and conducting real-time monitoring and analysis, I am at the forefront of ensuring the security posture of our systems.6.My expertise encompasses endpoint security with Trellix (McAfee EPO), DLP Alert Review, and performing Anti-Virus Scans using Microsoft Defender. 7.Additionally, I excel in phishing analysis, URL/domain blocking, and incident response using Defender ATP and KQL queries.8.My commitment to excellence is evident in my role as a key player in Security Incident Response, ensuring timely closure within SLAs.9.My technical skill set includes expertise in SIEM tools (Azure Sentinel, Splunk), EDR tools (Trellix, Cybereason), endpoint security (Microsoft Defender), virtual sandbox (VMRay Scan), and cloud security (CloudSEK). 10.Beyond my professional endeavors, I am a Cybersecurity Ambassador, constantly seeking opportunities for growth. I have completed Microsoft\'s Generative AI Course on LinkedIn and have been recognized with an Exceptional Performance rating.

Experience

1. Security Specialist

   Cognizant

   Jun 2024 — Present · Chennai, IN

   Proactively monitor and report alerts in a 24*7 SOC environment using SIEM tools like Azure Sentinel and end-to-end Email security with O365.• Handle various Cybersecurity Incidents, including malware, Brute Force, Email phishing attacks, O365 alerts, and Red Team host alerts.• Conduct Real-Time Monitoring, Investigation, Analysis, Reporting, and Escalations of Security Events from Multiple log sources.• Continuously monitor and interpret threats using IDS and SIEM, analyze security event data from the network.• Work on Endpoint security with Trellix (McAfee EPO) and conduct hands-on experience in DLP Alert Review.• Perform Anti-Virus Scans on endpoints via Microsoft Defender.• Conduct initial triage on Phish mailbox reported by users, analyzing spam/phish email incidents.• Monitor server health, work on RCAs for outages, and block URL’s/Domains on security controls like Zscaler, O365 Exchange, etc.• Handle alerts in Defender ATP and perform Advanced hunting using KQL Queries.• Prepare reports for changes detected in the Algosec firewall.• Utilize CloudSEK ‘XVigil’ digital risk monitoring platform to investigate harmful incidents across the dark web.• Manage Defense working with VMRay for scanning malicious files during uploading/downloading.• Work with Cloud Proxy tools – Zscaler, ZPA, ZIA to protect end-user traffic and data.• Follow up on assigned incidents daily and lead Security Incident Response, ensuring timely closure within SLA.• Organize and handle business calls and bridges periodically.

Education

• Saveetha Engineering College

  Bachelor of Engineering - BE

  2016 — 2020