Dhanraj Desai

Information Security Analyst L1

Tata Consultancy Services Limited (TCS)

Jan 2024 - Present

Monitor security alerts and events 24×7 using SIEM tools (Splunk and IBM QRadar) to identify and respond to potential security threats. Perform real-time log analysis, alert triage, investigation, and incident escalation in accordance with organizational security policies and SLAs. Analyze and investigate malware infections, phishing emails, suspicious activities, and endpoint security alerts using Microsoft Defender, CrowdStrike, and EDR solutions. Monitor logs from Firewalls, IDS/IPS, Proxy, DNS, Windows, Linux, and network devices to detect unauthorized or malicious activities. Conduct Threat Hunting activities by analyzing Indicators of Compromise (IOCs) and identifying emerging security threats using the MITRE ATT&CK Framework. Utilize security tools such as Nmap, Kali Linux, Mimecast, and ServiceNow for network analysis, email security, incident tracking, and troubleshooting. Perform Root Cause Analysis (RCA), document security incidents, create incident reports, and recommend remediation actions to reduce organizational risk. Collaborate with cross-functional IT and security teams to support incident response, vulnerability management, security operations, and continuous improvement initiatives.