Vikash Kumar

About Vikash Kumar

Experienced Security Operations Center Analyst with a demonstrated history of working on triaging security incidents, Incident Response, Log Analysis, and Threat Hunting using hypothesis-driven investigation.Experience in using LogRhytm SIEM for analyzing logs generated from Network Devices, Authentication Devices, Endpoints, Email Gateways, Antivirus logs, Firewalls, WAF, and other cloud-hosted devices.Experience in investigating a potential endpoint compromise using EDR Tools Falcon CrowdStrike, Microsoft Defender Advanced Threat Protection (MDATP), Carbon Black and proactively hunting suspicious events based on MITRE-defined TTPs.Experience in handling targeted/large Phishing campaigns from Several Threat Actors by finding and blocking IOCs as part of proactive measures. Experienced in investigating emails reported by end users and responding with appropriate recommendations.Identifying repetitive false positive alerts and suggesting fine-tuning to decrease FPs.

Experience

1. Security Engineer

   Tata Consultancy Services

   Aug 2023 — Present · Bengaluru, IN

   WIZ: Monitor 24/7 real-time security events by performing event analysis, investigation, and mitigation.• Cortex: Review/analyze the alert triggered and create a ticket using the XSOAR tool.• Sentinel One: Detect and Respond to security threats through detailed security analysis validation through continuous monitoring of endpoint protection tools.• Investigating the suspicious emails reported by users and identifying the malicious emails along with any malware Attachments in sandbox environments.• Identifying false positives and fine-tuning them in different security tools.• Share cyber threat alliance brief details about cyber-attack vulnerabilities and release of any new patches etc. to clients about security happenings around the globe.• Ability to work on threat hunting by creating queries in SIEM tools.• Ability to read and understand system data including security event logs, system logs application logs and network traffic.• Experience in investigating and analyzing malware threats.• Generated and delivered Daily, Weekly, and Monthly status reports and advisories to stakeholders.• Created and Modified playbooks and security operating procedures to ensure continual service improvement.

Education

• Vimla Pandey Memorial Gyan Niketan Senior Secondary School

  High School (X)

  2013

• Laxmi Naraian College of Technology & Science

  Beachlor of engineering, Computer Science

  2016 — 2020

• St. Xavier's College

  XII, ISc(PCM)

  2013 — 2015