Shailesh Upadhyay

About Shailesh Upadhyay

Job Responsibilities: Worked in a 24x7 Security Operations Center Monitoring the customer network using ArcSight SIEM Act as first level support for all Security Issues Analyzing Realtime security incidents and checking whether its true positive or false positive Performing Real-Time Monitoring, Investigation, Analysis, Reporting and Escalations of Security Events from Multiple log sources. Raising true positive incidents to the respective team for further action Creating tickets on service now and assigning it to the respective team and taking the follow-up until closer Escalating the security incidents based on the client\'s SLA and providing meaningful information related to security incidents by doing in-depth analysis of event payload, providing recommendations regarding security incidents mitigation which in turn makes the customer business safe and secure. Contacting the customers directly in case of high priority incidents and helping the customer in the process of mitigating the attacks. Determine the scope of security incident and its potential impact to Client network; recommend steps to handle the security incident with all information and supporting evidence of security events. Monitoring security systems and networks for anomalies Work closely with business units to ensure that they know what and how to feed data into the Arcsight SIEM Co-ordinate with networking teams to maintain and establish communication to remote Arcsight Connectors Investigate malicious phishing emails, domains, and IPs using Open-Source tools and recommend proper blocking based on analysis Installing ArcSight Connectors Upgradation of ArcSight Connectors Integration of new devices with ArcSight such as Windows, Linux, CISCO Firewall, Routers, Switches etc. Doing the troubleshooting if any device is not sending the logs to the ArcSight. Creation of ArcSight content like Correlation Rules, Query, Report, Dashboards etc. Maintain keen understanding of evolving internet threats to ensure the security of client networks. Troubleshooting SIEM dashboard issues when there are no reports getting generated or no data available

Experience

1. Security Analyst

   Quauto Technologies Pvt Ltd

   Feb 2022 — Present

   Act as first level support for all Security Issues. Monitoring and analyzing Real-time security incidents and checking whether it’s true positive or false positive. Performing Real-Time Monitoring, Investigation, Analysis, Reporting and Escalations of Security Events from Multiple log sources. Raising true positive incidents to the respective team for further action. Creating tickets on service now and assigning it to the respective team and taking the follow-up until closer. Monitoring security systems and networks for anomalies. Investigate malicious phishing emails, domains, and IPs using Open-Source tools and recommend proper blocking based on analysis. Email Analysis,Malware Analysis andThreat Hunting. Installing ArcSight Connectors. Upgradation of ArcSight Connectors. Integration of new devices with ArcSight suchas Windows,Linux,CISCO Firewall, Routers, Switches etc. Creation of ArcSight content like Correlation Rules, Query, Report, Dashboards etc. Applying FineTuning to avoid false positive alerts. Integration of Windows and Linux devices with Splunk. Maintain keen understanding of evolving internet threats to ensure the security of client networks.

Education

• RGPV University

  Bachelor of Engineering - BE, Electrical and Electronics Engineering

• RGPV

  Bachelor of Technology

  2012

• MP Board

  High School Diploma

  2006

• MP Board

  High School Diploma

  2008