Rishitha Mendu

Security Analyst

Hexagon

Sep 2022 - Present

Monitor and analyze security alerts and events generated from SIEM and EDR platforms to identify potential threats and suspicious activities. Perform L1 and L2 incident triage, including investigation of malware, phishing, endpoint compromises, and unauthorized access attempts. Investigate phishing emails by analyzing headers, URLs, attachments, sender reputation, and payload behavior. Conduct endpoint investigations using EDR tools to analyze processes, file hashes, registry changes, and persistence mechanisms. Map detected threats to MITRE ATT&CK techniques to improve incident classification and response accuracy. Perform IOC validation and enrichment using threat intelligence platforms to assess malicious indicators. Escalate confirmed incidents to senior analysts or incident response teams with clear documentation and evidence. Support incident containment and remediation activities by coordinating with IT and infrastructure teams. Assist in false positive analysis and alert tuning to improve SOC efficiency and reduce noise. Participate in vulnerability assessment support, validating vulnerabilities and tracking remediation status. Create and update incident reports, investigation notes, and SOC documentation for audit and compliance purposes. Follow SOC playbooks, SOPs, and response procedures to ensure consistent and compliant operations. Collaborate with team members during security incidents and high-severity events to ensure timely resolution. Maintain awareness of emerging threats, attack techniques, and security trends to enhance detection capabilities.