Vikas Kadam

About Vikas Kadam

Cybersecurity professional with a strong foundation in Security Operations, threat detection, and incident analysis. Certified Ethical Hacker (CEH) with in-depth understanding of attacker tactics, penetration testing techniques, and real-world adversary behavior.Hands-on experience in Level 1 SOC and IT Security Operations, including incident triage using CrowdStrike Falcon EDR, endpoint protection monitoring, malware analysis using static and dynamic techniques, phishing and email analysis using VirusTotal, MXToolbox, and AbuseIPDB, and supporting vulnerability remediation. Familiar with Parablu endpoint backup and data protection and implementing data security controls such as Forcepoint DLP.

Experience

1. Desktop Support Engineer

   Cms It Services

   Dec 2024 — Present

   Provide Level 1 IT & Security Operations support with focus on endpoint protection, incident validation, and data security.• Validate and triage security incidents using CrowdStrike Falcon EDR (read-only access) by analyzing detections, process trees, and incident graphs.Review CrowdStrike incident timelines and graphs to identify root cause, affected hosts, and threat behavior before closing tickets.• Close validated security incidents with proper documentation and evidence, ensuring SLA and audit compliance.• Ensure CrowdStrike Falcon sensor coverage across all managed endpoints and coordinate remediation for missing or unhealthy agents.• Review and verify suspicious external emails by analyzing sender reputation and email authentication via MXToolbox, VirusTotal, and AbuseIPDB.• Assist in vulnerability remediation and patching activities by validating vulnerable systems and coordinating fixes with IT teams.• Monitor suspicious outbound connections, malicious processes, and file activities using threat intelligence platforms such as VirusTotal, MXToolbox, and AbuseIPDB.• Review and validate suspicious external emails, analyze sender reputation and email headers, and confirm phishing attempts.• Report confirmed phishing emails to the Exchange Admin team for blocking and mitigation.• Escalate confirmed malicious IPs, URLs, hashes, and ports with clear recommendations for blocking and containment.• Monitor CrowdStrike Falcon EDR alerts and coordinate with the InfoSec team for incident response actions.• Implement and verify USB/Pendrive blocking policies using Forcepoint DLP across all domain-joined devices.

Education

• Ashoka Education Foundations Ashoka Centre for Business & Computer Studies,Chandasi, Tal. Dist.Nashik 422013

  Bachelor of Science , Computer Science