Satish Mandelli

About Satish Mandelli

I\'m a fast learner with a passion for problem-solving, and I\'m always eager to take on new challenges. I\'m seeking a role where I can apply my skills and contribute to the development of innovative software solutions. Let\'s connect and discuss how I can add value to your team.

Experience

1. Soc Analyst

   Accenture

   Apr 2022 — Present · Bengaluru, IN

   Working in Security Operation Centre (24x7), monitoring SOC events, detecting and preventing intrusion attempts. • Working on the Splunk and Qradar (console & web console) providing operations support at the Security Operations Center for different member firms. •Splunk, Qradar, Azure Sentinel & Carbon Black EDR, Working on monitoring of alerts, analyzing, coordinating with concerned teams with remediation steps and triaging them as True positive and False Positive. •Monitoring, analyzing, and responding to infrastructure threats and vulnerabilities. •Collecting the logs of all the network devices and analyze the logs to find the suspicious activities. Monitored and analyzed security events using SIEM tools to identify potential threats and anomalies. •Perform incident monitoring, response, triage and initiate investigations Create and track incidents and request using ticketing tool: Service Now •Investigate all reported suspicious emails and determine whether the emails are malicious, non-malicious or legitimate and reply to the user who reported the suspicious email with a message reporting the findings and any recommendations. • Perform Malware Analysis by Static and Dynamic methods to identify the malicious IOCs-indicator of compromise, taking action around IOCs identified. •Investigated and triaged alerts, ensuring timely response and resolution of security incidents. • Investigate malicious phishing emails, domains and IPs using Open Source tools and recommend proper blocking based on analysis. • Conducted analysis of network traffic, logs, and alerts to identify signs of unauthorized activities. •Monitoring alerts (SIEM, IPS, wireless devices, tripwire and other security devices). Performed threat analysis through research and examining log data. • Monitoring Windows logs & raising cases for login failures & lockouts based on defined thresholds. • Monitoring Tripwire logs for critical file modification on windows servers.

Education

• Kakinada Institute of Engineering and Technology

  Bachelor of Technology - BTech

  2018 — 2022