About
Information Security Analyst with 2 years of SOC experience monitoring security events in Splunk and Microsoft Sentinel, investigating endpoint threats with Microsoft Defender for Endpoint, and analyzing phishing emails, Malware analysis. Skilled in network security, threat intelligence, and incident documentation through ServiceNow.
Skills & Expertise (28)
Work Experience
Information Security Analyst
TCS
Jul 2024 - Present
Working in the Security Operation Centre (24x7), Monitoring SOC Events, Detecting and Preventing. Collecting the logs all the Network Devices and Analyzing the logs to find Suspicious Activities. Recognizing Attacks Based on their Signatures. Managed the full lifecycle of security incidents through ServiceNow, ensuring that all high-priority tickets were addressed and resolved within the SLA window. Technical Knowledge of Security Tools (Anti-Virus/ Malware, IDS/IPS, Firewalls, Proxies, Vulnerability, etc) and Infrastructure. Filling the Daily Health Checklist Reports. Hands on Experience of Analyzing email Security threats and security controls, Phishing, spam emails including investigate on email headers, Attachments and URL’s and taking appropriate actions to block the URL, IP at Proxy, and Firewalls and Also to Block Sender, Domain in Email Gateway. Static and basic dynamic malware analysis and taking appropriate action quarantine file, block url at MDE & Firewall. Integration of new devices with Splunk such as Windows, Firewall, Routers, Switches etc. Mapped detected threats and alerts to MITRE ATT&CK tactics and techniques to support investigation and reporting. Conducted proactive Threat hunting across logs and endpoints to identify indicators of compromise not flagged by automated alerts.
Education
Bachelor of Commerce
- · Afghanistan
Certifications
No certifications added yet
Interested in this developer?
Profile Score Breakdown
Profile Overview
Skills (28)
Click a skill to find developers with the same skill
