Riya Dixit

About Riya Dixit

Cybersecurity professional with 3 years of experience in monitoring, detecting, and investigating cyber threats within defined SLAs. Skilled in analyzing SIEM alerts, investigating events, fine-tuning configurations, and raising security tickets in Jira. Proficient in security solutions including Anti-virus, Firewalls, IPS/IDS, Email Gateways, Proxy, and more. Capable of recommending new correlation rules and use cases to enhance the protection of the organization’s network environment. Roles and responsibilities-1. Monitor and analyze security incidents in a 24/7 SIEM system through various monitoring and detection tools, such as Splunk, Vectra and CrowdStrike. Conduct forensic analysis to determine the root cause and extent of the incident. This includes examining logs, network traffic, and other relevant data to reconstruct the timeline of events and identify indicators of compromise (IOCs). Assess the severity and scope of detected incidents to prioritize response efforts based on impact and risk to the organization\'s operations and data. Implement immediate containment measures to prevent further escalation of the incident and mitigate its impact. Determine true positives and false positives, and escalating incidents as needed. Document and describe the incidents, detailing the incident timeline, actions taken, and lessons learned. Raise tickets to block malicious IPs, domains, and hash values, and create comprehensive shift handover reports to ensure smooth operations. Hands-on experience in the Incident Response activities like Malware Analysis, Email Analysis. Hands-on experience in the mitigation activities like Brute Force Attack, DOS & DDOS Attack and Ransomware Attack. In-depth knowledge of industry frameworks, including the Cyber Kill Chain and MITRE ATT & CK. Skilled in conducting searches and generating detailed reports. Proficient in analyzing and interpreting sandboxing reports. Collaborated with cross-functional teams including IT to ensure comprehensive incident resolution. Contributed to the development and enhancement of incident response documentation and procedures.

Experience

1. Security Analyst

   UKG

   Apr 2022 — Present · Noida, IN

   Monitor and analyze security incidents in a 24/7 SIEM system through various monitoring and detection tools, such as Splunk, Vectra and CrowdStrike. Conduct forensic analysis to determine the root cause and extent of the incident. This includes examining logs, network traffic, and other relevant data to reconstruct the timeline of events and identify indicators of compromise (IOCs). Assess the severity and scope of detected incidents to prioritize response efforts based on impact and risk to the organization\'s operations and data. Implement immediate containment measures to prevent further escalation of the incident and mitigate its impact. Determine true positives and false positives, and escalating incidents as needed. Document and describe the incidents, detailing the incident timeline, actions taken, and lessons learned. Raise tickets to block malicious IPs, domains, and hash values, and create comprehensive shift handover reports to ensure smooth operations. Hands-on experience in the Incident Response activities like Malware Analysis, Email Analysis. Hands-on experience in the mitigation activities like Brute Force Attack, DOS & DDOS Attack and Ransomware Attack. In-depth knowledge of industry frameworks, including the Cyber Kill Chain and MITRE ATT & CK. Skilled in conducting searches and generating detailed reports. Proficient in analyzing and interpreting sandboxing reports. Collaborated with cross-functional teams including IT to ensure comprehensive incident resolution. Contributed to the development and enhancement of incident response documentation and procedures.

Education

• GL Bajaj Institute of Technology and Management

  Bachelor of Technology - BTech

  2017 — 2021

• Swaraj India Public School

  10+2

  2004 — 2017