Yash Kedia

Experience

1. Consultant

   EY

   Sep 2024 — Present · Mumbai, IN

   SOC Implementation and Integration Engineer with extensive expertise in integrating client data center servers to IBM QRadar SIEM, ensuring seamless data flow and enhanced security monitoring.Ensured MITRE framework coverage for SIEM use cases within EY SOC, aligning with industry best practices.Expert in creating use cases, fine-tuning/whitelisting, and use case simulation to optimize security operations.Skilled in creating Bash code for API-based cloud server integration and automation of Linux tasks.Implemented (UEBA) for client AD Servers, improving organisation users anomaly detection and risk assessment.Clients Handled - Kotak life, Jindal steel, Haldirams, USV pharma, SUDLife,IHCL, SPAN technologies, RGCIRC, Cred avenue, Allanasons, Borosil, Daikin, Daikin Citizen, Shapoorji paloonji(SPCPL), Tata technologies (TTL), Interglobe Aviation(Indigo), SBIG,Mahindra and Mahindra, Fractal, Tata Starbucks (TSPL).Integration and Tools - IBM QRadar, AWS GuardDuty, AWS CloudWatch, AWS CloudTrail, AWS WAF, AWS S3, AWS SQS queue, AWS Lambda Functions, Cloudflare, Palo Alto Prisma Cloud, Palo Alto Cortex XDR, Trend Micro Vision One and Trend Micro Workload Security Manager, Crowdstrike, Microsoft Defender for cloud, Microsoft Office 365, Cisco Firewall, SonicWall Firewall,Azure firewall, Azure event hub, Azure platform, Defender 365,SentinelOne AV, MacAfee DLP, MacAfee EPO, Arcos PAM, Palo Alto Firewall, FortiGate firewall,NextGen firewall, Linux RHEL, Ubuntu, Suse Linux, IBM AIX Servers, IBM i AS400 server, HP unix, Checkpoint firewall, Splunk, Cisco IronPort ESA, Forcepoint DLP, Zscaler proxy, Forti analyzer, Forti-Authenticator, Active Directory, DNIF SIEM, Splunk SIEM, MS SQL server, Oracle RDBMS server, Ruckus switches, Cisco IOS, Cisco ISE (NAC), Cisco CatOS, Cisco Nexus,Cisco Meraki, Cisco ASA, WSO2 Api manager, Carbon Black XDR, VMware vSphere, VMware Exsi, VMware VCentre, HPE SAN Storage. Cisco SAN Switches, Aruba Switches.