Ravi Kumar

Senior Soc Analyst @Diverse Lynx

Noida, IN

Worked in a 24x7 Security Operations CenterMonitoring the customer network using DNIF SIEMAct as first level & Second Level Support for all Security IssuesAnalyzing Realtime security incidents and checking whether its true positive or false positivePerforming Real-Time Monitoring, Investigation, Analysis, Reporting and Escalations of Security Events from Multiple log sources.Raising true positive incidents to the respective team for further actionCreating tickets on service now and assigning it to the respective team and taking the follow-up until closerEscalating the security incidents based on the client\'s SLA and providing meaningful information related to security incidents by doing in-depth analysis of event payload, providing recommendations regarding security incidents mitigation which in turn makes the customer business safe and secure.Contacting the customers directly in case of high priority incidents and helping the customer in the process of mitigating the attacks.Determine the scope of security incident and its potential impact to Client network; recommend steps to handle the security incident with all information and supporting evidence of security events.Monitoring security systems and networks for anomaliesWork closely with business units to ensure that they know what and how to feed data into the DNIF SIEMCo-ordinate with networking teams to maintain and establish communication to remote DNIF SIEMInvestigate malicious phishing emails, domains, and IPS using Open-Source tools and recommend proper blocking based on analysisRunning & Making New Query on DNIF as per client requirements.Doing the troubleshooting if any device is not sending the logs to the DNIF.Creation of DNIF content like Correlation Rules, Query, Report, Dashboards etc.Maintain keen understanding of evolving internet threats to ensure the security of client networks.

NSIT Academy

Bachelor of Technology - BTech