Santhula Hari

About Santhula Hari

Job Responsibilities- Monitoring the customer network traffic using IBM QRadar SIEM Tool & FIM Console. Performing Real Time Monitoring, Investigation, Analysis, Reporting and Escalations of Security Events from Multiple log sources. Preparation of Daily BAU Meetings & Prepare MOM (Moments of meetings). Daily working on ticketing tools on Jira ticket tool ticket assign to PWC andinternal team as per SOPs. Maintain a keen understanding of evolving internet threats to ensure the securityof client Networks. Escalating the security incidents based on the client\'s SLA and providingmeaningful Information related to security incidents by doing in-depth analysis of event payload, providing recommendations regarding security incidents mitigation which in turn makes the Customer business safe and secure. Contacting the customers directly in case of high priority incidents and helping the customer in the process of mitigating the attacks. Reviewing and handling the incident tickets created by SOC analysts and helped them to contain and eradicate the alert/incident. Troubleshooting SIEM dashboard issues when there are no reports getting generated or no Data available. Determine the scope Incident and its potential impact to Client network Recommend steps to handle the security incident with all information and support security events. Creation of Reports, Dashboards and Rules fine tuning. Maintain & document the application support strategy. Perform incidentmonitoring, response, triage and initiate investigations. Analyse security event data from the data (IDS, SIEM, FIM, Cortex XDR,Forcepoint DLP Cisco CloudLock DLP Webex Monitoring. Investigate malicious phishing emails, domains and IPs using Open Source toolsand recommend proper blocking based on analysis.

Experience

1. Security Operations Center Analyst

   Cognizant

   Oct 2020 — Present · Hyderabad, IN

Education

• Malla Reddy Institute Of Engineering and Technology

  Master of Business Administration - MBA

  2017 — 2019