Nithin Challa

Security Analyst

BluSapphire Cyber Systems Pvt Ltd

Jun 2024 - Present

Working in a 24x7 Security Operations Centre (SOC) to monitor, detect, and prevent intrusion attempts. Performing real-time monitoring of network and endpoint security devices, including firewalls, IPS, EDR, and email security platforms, to identify potential threats. Monitoring and analyzing SOC alerts using SIEM platforms such as BluSIEM, Hunters to detect anomalies and suspicious activities. Investigating security incidents using EDR solutions like CrowdStrike Falcon and Microsoft Defender for Endpoint to identify and contain threats. Performing triage and escalation of security events, distinguishing between false positives and genuine threats to improve response efficiency. Conducting incident analysis and supporting incident response processes, providing actionable recommendations, including root cause analysis and documentation. Performing rule tuning and correlation adjustments to optimize SOC performance and minimize false positives. Leveraging threat intelligence platforms such as Virus Total, Abuse IPDB, and IBM X-Force to analyze and verify the reputation of IPs, hashes, domains, and other IOCs. Managed the MISP platform by adding threat feeds and correlating them with client log data in SIEM to improve threat detection through intelligence-based matching. Preparing periodic security reports and collaborating with clients weekly to review findings and enhance overall security posture. Maintain awareness of emerging threats, vulnerabilities, and cybersecurity best practices to proactively strengthen monitoring and response capabilities.