Shiv Kumar

Cybersecurity Analyst @Arctiq

Halifax, NS, CA

Monitored customer network using Splunk SIEM in a 24x7 Security Operations Center.Analyzed real-time security incidents to determine true positives or false positives.Created tickets on service now and Zendesk, escalating security incidents based on client SLAs.Contacted customers directly during high priority incidents to assist in mitigating attacks.Managed and monitored Splunk and Azure Sentinel for real-time threat detection and incident analysis.Conducted in-depth analysis of security incidents, identifying root causes and implementing corrective actions.Led threat hunting initiatives, performing comprehensive analytics, and developing detection queries to identify and address potential threats.Developed and implemented Standard Operating Procedures (SOPs) and process documentation to optimize and streamline security operations.Conducted comprehensive alert investigations with over 5 years of experience in both L1 and L2 roles, ensuring self-sufficiency in investigating events/alerts from initial access to impact.Specialized in analyzing phishing emails, performing quarantine email analysis, and enhancing overall email security protocols.Maintained a strong understanding of the ever-evolving tactics and techniques used by threat actors, as mapped under the MITRE Framework.Prepared high-quality reports and occasionally present threat hunt findings to clients, effectively collaborating with security teams and stakeholders.Conducted thorough investigations of suspicious activities, including brute force attacks, SSH connections, and web-based threats.Developed and implemented Standard Operating Procedures (SOPs) and process documentation to optimize and streamline security operations.