Gudala Kiran

SOC Analyst

Cybage Pvt Ltd

Jul 2022 - Present

Monitoring the alerts triggered from Sumo Logic and by analyzing logs and by taking necessary action with respect to alerts and remediate the alert by meeting the Service Level Agreement (SLA). Prime work includes creating security Use cases via Crowd strike. Participating in the incident response and investigation process. Working on incidents and reviewing the alerts and do detailed analysis on alerts. Handling High Severity Alerts and meeting the SLA on time. After analyzing alert raising incident in ticketing tool for true positive incidents and follow up the team up to incident closure. Review and analyze audit records weekly for identified unusual activity and provide evidence of review and/or findings. Created Automation account for weekly reports. Report alerts and investigate issue identified during monitoring the live traffic. Preparing Daily/weekly/Monthly Reports for clients. Responsible to investigate the Health checkup. Support security incident response processes in the event of a security breach by providing incident reporting. Working on Phishing malware alert, investigate the root cause analysis and take the relevant action to remediate the Alert. Delivering technical trainings to team members on emerging cyber security related topics on a monthly basis. Azure ATP Alerts which gives us information about the user behavior and AD signals to identify and investigate the advance threats, Compromised Identity, Insider actions is being monitoring through the console. Working on MCAS alerts, which provides visibility over the user actions and control over data travel and data monitoring. Analyzed BitSight reports to monitor external security posture and Vulnerabilities. Performing analysis on Emails which are reported by Users and categorize those into phishing, Spam, Clean and Purging the Phishing/Malicious mails. Providing 24*7 support and coordinating with required team to resolve the issues. Filling the Daily health checklist. Checking Daily Health Checklist in Forescout Tool. After a new alert was generated in the environment, I initiated the investigation, gathered all relevant evidence, and documented the results in the Onspring report. Preparing project status report in MS Excel, PowerPoint.