Sowjanya P

About Sowjanya P

Cybersecurity professional with 4 years of experience as a SOC Analyst, focused on proactive monitoring, analysis, and incident response for enterprise environments. Proficient in using tools like Splunk, QRadar, and ArcSight to detect and mitigate threats. Strong knowledge of SIEM, intrusion detection, malware analysis, and threat intelligence. Passionate about enhancing organizational security posture through continuous learning and real-time threat mitigation.

Experience

1. Lead Engineer

   HCLTech

   May 2022 — Present · Hyderabad, IN

   Worked in a 24*7 high availability environment as a Security analyst, analyzing all the events generated by security tools, creating incidents using Servicenow, and resolving them within the SLA. Monitoring the incoming security alerts in IBM QRADAR, Azure Sentinal. Collecting the logs of all the network devices and analyze the logs to find the suspicious activities. Handling Alerts from multiple Security Log sources such as Proxy, Anti-Virus and EDR. Deep dive Investigation through Falcon EDR. Worked on application whitelisting (Airlock) and proactively preventing malicious code from running on the environment or systems, before any damage occurs. Analyzing the logs generated by security devices, confirming on the verdict status like True Positive /False Positive, and taking further actions. Monitoring, analysing and responding to infrastructure threats and vulnerabilities. Analysing malware alerts for an indicator of compromise (IOC) and indicator of an attacker (IOA), Investigation, and mitigation of risk. Responsible to preparing the root cause analysis reports based on the analysis. Creating case for the suspicious issue and forwarding it to Onsite SOC team for further investigation. Website Anti-Malware and Defacement monitoring and real-time alerting based on anomalies detected. Preparing Metric and incident response reports for the events generated by each tool and appropriate statistics sending them to Client for a Weekly, Monthly basis and documenting the critical findings. Monitoring of SOC events, detecting and preventing the Intrusion attempts. Investigating the events based on particular criteria by creating an Active Channel. Handling the failed logins issues from the different systems. Investigate malicious phishing emails, domains, and IPs and recommend proper blocking based on analysis. Working on security related threats and Incidents.

Education

• New Vision Junior college

  Intermediate

  2007 — 2009

• DRK College of Engineering & Technology

  B.tech, Electrical, Electronics and Communications Engineering

  2009 — 2013

• KVM Talent High School

  Matriculation

  1997 — 2007