G. Venkata Kishore

Monitor the SIEM console (IBM Qradar) to identify security alerts and events indicating potential security incidents. 08/2020 – present •Collaborate with the Level 1 (L1) team to analyze and investigate security alerts further, providing recommendations and guidance when required. •Be comfortable working in rotational shifts, enabling round-the-clock monitoring and incident response coverage. •Conduct a secondary screening of alerts to ensure no critical security events are overlooked. •Respond promptly to reported incidents, taking appropriate actions to contain, mitigate, and remediate security breaches. •Manage incident escalations, ensuring that high-priority incidents are appropriately addressed and communicated to relevant stakeholders. •Perform in-depth investigations of security incidents, understanding attack trends, and making necessary adjustments to SIEM rules and configurations. •Track the incidents' progress and resolution, ensuring compliance with established Service Level Agreements (SLAs). •Review Daily Incident Summary Reports to understand the overall security landscape. •Prepare and send Weekly and Monthly Status Reports to share insights and progress with management. •Review changes and service requests that could impact security operations and inform the Operations Manager as needed. •Collaborate with the team to develop and enhance incident response playbooks, ensuring standardized and efficient response procedures.