Ruhu Shaik

About Ruhu Shaik

I am a proactive and achievement-oriented professional with nearly 7 years of experience in Cyber Risk Management and SOC Analysis, targeting challenging roles in the field of Cybersecurity, with a focus on Purple Team Operations. Led end-to-end Incident Management Framework Cycle right from Incident Identification, Incident Containment, performing Root Cause Analysis, suggestion and implementation of preventive and corrective controls and perform Network Analysis as needed on a case-to-case.Excel in Blue Team and Red Team Operations, specializing in Cyber security, SOC Analysis, VAPT, SDLC, SIEM, DAST, Cloud Security, Web Application Security, Network Security, Risk Assessment, and Security Incident Response.Proficient in creating vulnerability and remedy reports, and ensuring end-to-end Incident Investigation and Incident Response process.Expertise in performing Vulnerabilities Assessments for the entire enterprise and reported findings to management.Skilled at SOC (Security Operations Centre) Operations methodology such as Incident Handling, Threat detection, Network Traffic Monitoring, Real-Time Security Event Handling, Log Analysis, identifying and classifying attempted compromises to networks through heuristics identification of suspect traffic.Competent at evaluating emerging Cyber Security threats and devising ways to manage them, always stay up-to-date with the latest security and technology developments.

Experience

1. Cybersecurity L2 Analyst

   Tata Consultancy Services

   Dec 2022 — Present · Hyderabad, IN

   Navigate the consoles to effectively correlate, investigate, analysis and remediate both exposed and obscure vulnerabilities to give situational awareness and real time incident response.• Troubleshooting SIEM dashboard issues when there are no reports getting generated orno data available.• Understanding of SIEM tools which collect, process, prioritize, correlate, monitor, and analyse enterprise generated events.• Escalating the security incidents based on the client & SLA and providing meaningfulinformation related to security incidents by doing an in-depth analysis of event payload,providing recommendations regarding security incidents mitigation which in turn makesthe customer business is safe and secure.• Creation of reports, dashboards and document the tickets fully with all the action taken for the incident and update it on frequent basis and maintain ticket quality by documenting it with all the required comments.• Use the escalation process for multiple users impacting incidents all the time and keep update the management about the progress of incident• Sending daily, weekly and monthly report to the customer who contain all the information about internet security, configuration changes, deny logs, failed logons, alert summery, machines without AV, network security etc.• Performing Real-Time Monitoring, Investigation, Analysis, Reporting and Escalations ofSecurity Events from Multiple log sources.

Education

• Kakatiya University

  Bachelor of Technology - BTech, Electrical and Electronics Engineering