Umang Jain

About Umang Jain

Cyber Security Analyst• Good understanding of differenttypes of cyber-attacks.•Managed and monitored Illumio PCE and agents for micro-segmentation, policy creation, and enforcement across on-premises and cloud environments.• Observe security solutions: SIEM, firewall appliances, intrusion prevention systems, Antivirus, analysistools, and log aggregation tools.• Analyze network data flow for anomalies using rules, reports, and dashboards, and detect malicious network activity.• Analyze andmonitor any unusual activity in the internal network from the HIDS including checking any changes in the states of the mentioned Files/Folders/File Systems.• Assist with the development of processes and proceduresto improve incident response time, analysis of incidents ad overall SOC functions.• Performed Vulnerability assessment for Identifying and reporting security weaknesses in network systems, and web applications.• Integrity check control for all critical files and alerts during unauthorized modification.Technical and Software Proficiency:• Host Monitoring Tools: OSSEC, Trend Micro Deep Security• Security Monitoring Systems and Tools: SIEM (RSA Envision, IBMQRadar, ArcSight), Trendmicro, Illumio• Security/Vulnerability Tools: Nessus• Network/Application Firewall: Checkpoint, FortiGate, ModSecurity• Networking Protocols and Tools: TCP/IP, HTTP/HTTPS, SSL, DNS• Windows/OS: Window, Linux• Reporting Tools: Tivoli IBM Helpdesk, Delivery Management Portal• Language: Familiar- Java

Experience

1. Cyber Security Analyst

   Tata Consultancy Services

   Dec 2021 — Present · Delhi, IN

   Goodunderstanding of differenttypes of cyber-attacks.• Observe security solutions: SIEM, firewall appliances, intrusion prevention systems, Antivirus, analysistools, and log aggregation tools.• Analyze network data flow for anomalies using rules, reports, and dashboards, and detect malicious network activity.• Analyze andmonitor any unusual activity in the internal network from the HIDS including checking any changes in the states of the mentioned Files/Folders/File Systems.• Assist with the development of processes and proceduresto improve incident response time, analysis of incidents ad overall SOC functions.• Performed Vulnerability assessment for Identifying and reporting security weaknesses in network systems, and web applications.• Take follow-ups, close the events, and provide communications related to security events.• Conduct proactive monitoring, investigation, and mitigation of security incidents.• Analyze security event data from the network (RSA Envision, SIEM).• Real-time log monitoring in the Security Operations Centerfrom different devicessuch as Firewalls, IDS, IPS,Operating systems like windows, Linux, Databases, and Network devices.• Monitoring and analysis ofsecurity eventsto determine intrusion and malicious events.• Create andmaintain operational reportsfor daily, weekly, and monthly metrics.• Integrity check control for all critical files and alerts during unauthorized modification.Technical and Software Proficiency:• Host Monitoring Tools: OSSEC, Trend Micro Deep Security• Security Monitoring Systems and Tools: SIEM (RSA Envision, IBMQRadar), McAfee EPO,Trend Micro Antivirus• Security/Vulnerability Tools: Nessus• Network/Application Firewall: Checkpoint, FortiGate, ModSecurity• Networking Protocols and Tools: TCP/IP, HTTP/HTTPS, SSL, DNS• Windows/OS: Window, Linux• Reporting Tools: Tivoli IBM Helpdesk, Delivery Management Portal• Language: Familiar- Java

Education

• Dr. A.P.J. Abdul Kalam Technical University

  Bachelor of Technology - BTech, Computer Science