Vasant Andhale

Cyber Security Analyst @Tata Consultancy Services

Pune, IN

I involved in proactive monitoring and investigation of security alerts using the ArcSight SIEM tool- Monitoring and investigation of alerts on SIEM, based on user and asset behaviour and taking necessary actions- Investigate malicious phishing emails, suspicious links, domains, IPs and recommended proper blocking based on analysis- Sandboxing and analysis of phishing URLs, Attachments- Monitoring of Active Directory and Microsoft Azure Tool to analyse audit, sign-in logs- Monitoring of Incidents in Microsoft Defender EDR Tool and taking respective actions about the detection identified- In depth analysis of logs in the alerts and figuring out false positive and true positives- Performing whitelisting of blocked IOC\'s and clean-up activities- Part of a 24/7 team that manages SOC operations and collaborates with multiple security teams- Solid understanding of cyber security terminologies and cyber kill chain.