harsha balla

Systems Engineer

Societe Generale Global Solutions Center

Dec 2021 - Present

As an L1 Security Analyst, monitored high-severity security alerts using Microsoft Sentinel SIEM and Unity platforms to identify, prioritize, and investigate suspicious activities. Conducted in-depth investigations of escalated incidents by analyzing logs, network traffic, and system data to determine the nature and scope of security events. Worked on malware cases, identifying the root cause of detections and implementing containment measures to isolate compromised systems and prevent lateral movement of threats. Conducted regular quality checks on case analyses performed by the team and provided constructive feedback to ensure accuracy and consistency. Provided technical expertise and support to analysts during incident investigations, assisting in the identification and resolution of security threats. Documented incident details, response actions, and lessons learned for future reference. Provided inputs for tuning SIEM rules to improve threat detection accuracy. Managed security event monitoring, investigation of reported security incidents, and incident handling. Provided analysis on various security alerts using technologies including QRadar, Zscaler, Proofpoint, and Microsoft Defender XDR. Monitored Azure AD along with MCAS for anomalous login activities and remediated high-risk login events. Analyzed reported phishing emails from users and implemented the required remedial measures. Continuously monitored the Web Application Firewall (WAF) for signs of malicious traffic and took appropriate action as required. Performed investigative actions based on security events and carried out remediation according to SOPs.