Rahul Kushwaha

About Rahul Kushwaha

Technology keeps on changing constantly. This changing process includes data transmission, data analysis, storage, encryption, and beyond. The proficiency as a security analyst depends on how capable we are to update with the latest security trends and cyber-attack strategies.

Experience

1. Senior Consultant -cyber Security

   LTIMindtree

   Sep 2024 — Present

   Monitor security tools and dashboards: Regularly check SIEM, IDS/IPS, EDR, and firewall logs for suspicious activity and Identify patterns by linking logs from different sources (e.g, endpoint, network, cloud) also Determine if alerts are true positives or false positives using contextual data and threat intelligence.Analyze escalated alerts: Review incidents passed from L1 analysts for deeper investigation and Assess which systems, users, or data are affected and how widespread the issue is.Incident Response Isolate infected machines, disable compromised accounts, or block malicious IPs. and Identify anomalies in user or system behavior that may indicate stealthy attacks.Integrate IOCs (Indicators of Compromise) from external sources into hunting queries.Root Cause Analysis - Determine how the attacker gained access (e.g, phishing) and Suggest patches, configuration changes, or policy updates to prevent recurrence.Mentor L1 analysts: Guide junior analysts on triage techniques and investigation methods.and Pass advanced or persistent threats to L3 analysts or incident response teams.Clearly document and share investigation results with relevant teams.Maintain incident : Record timelines, actions taken, and outcomes for each incident.Create daily, weekly, or monthly summaries for management and compliance.Provide evidence and documentation for regulatory or internal audits.Work closely with L1 analysts to improve detection capabilities.Escalate complex incidents to L3 analysts or other specialized teams when necessary.