Pavankumar Alla

Security Analyst L1

M3 Solutions Private Limited

09-2023 - Present

Monitor security events across multiple clients using AlienVault USM in a 24x7 SOC. Triage alerts for high-fidelity threats including Brute-force login attempts, Phishing emails and suspicious domains, Malware infections, Unauthorized VPN access or geolocation anomalies, Account lockouts and unauthorized access attempts. Analyze logs from firewalls, antivirus, endpoint detection systems, domain controllers, and proxy servers. Correlate events from different log sources to identify patterns indicating attacks. Perform initial investigation and classification (True Positive / False Positive). Escalate valid incidents to L2 analysts or CSIRT with detailed analysis and impact assessment. Conduct email header analysis and inspect suspicious URLs, IPs, and attachments. Track incidents using Service now and update with investigative findings and resolution steps. Generate daily and weekly reports on alert trends and threat categories. Participate in tuning rules and use cases for reduction of noise and false positives. Maintain updated documentation for Standard Operating Procedures (SOPs) and use cases. Perform vulnerability scan reviews and highlight exposed critical assets to relevant teams. Played a key role in updating shift handover templates, improving cross-shift communication.