Madishetti Saipavan

Security Analyst

WIPRO

Jul 2024 - Present

Perform incident response activities including alert validation, evidence collection, IOC identification, threat analysis, escalation, and documentation. Correlate events across SIEM, endpoint, authentication, and network security platforms to identify Indicators of Compromise (IOCs). Perform threat intelligence enrichment using VirusTotal and AbuseIPDB to validate malicious IP addresses, domains, URLs, and file hashes. Analyse firewall, endpoint, authentication, and network logs to detect suspicious activities, brute-force attacks, and anomalous user behaviour. Assisted in threat hunting activities using Kusto Query Language (KQL) to proactively identify suspicious authentication patterns, anomalous user behaviour, and potential security threats. Reviewed and investigated Microsoft Defender XDR incidents and alerts to validate detections, reduce false positives, and support effective incident response activities. Conducted security log analysis across endpoint, identity, email, and network security platforms to identify attack patterns, Indicators of Compromise (IOCs), and potential security incidents. Manage incident documentation and escalation activities in ServiceNow while adhering to SOC playbooks and standard operating procedures. Apply MITRE ATT&CK techniques during investigations to improve threat visibility and detection capabilities. Implement and monitor Data Loss Prevention (DLP) controls to safeguard enterprise information.