TALARI TEJASWINI

Worked on Multiple SIEM tools like Microfocus Arcsight, RSA netwitness, IBM Qradar • Worked on Forcepoint DLP tool, Microsoft EDR. • Worked on ticketing tool SERVICE NOW. • Was Responsible for complete detailed analysis in the respective SIEM tool to provide the clear picture of incident to the customer. • Capable of performing Threat Research from and collected IOC's and attack vectors on various intelligence sources. • Create customized Daily/Weekly/Monthly reports and share with the relevant stakeholders. • Responsible to Analyse firewall, IDS and proxy logs to detect any possible attacks such as SQL injection, port scanning etc Responsible for Reactive alerting the customer for tracking of any malicious activity observed on customer network by monitoring Network/Endpoint devices. • Responsible for handling security incident. Run root cause analysis and post incident reviews working with the client to identify and plan improvements. • Able to Collect, Consume and Analyses data from the various Cyber Threat Intelligence Sources like Virus total, Cisco Tolas which helps in providing the information about the incidents in much larger, wider and clearer way to the clients. • Review and take a Reactive approach to false positive incidents and fine tune them in order to improve accuracy of the alerts. Keeping Myself Up-to-date on latest trends, attack pattern and keep posting to customer in-order to safeguard the client environment. Proven experience in mentoring Junior Analysts. • Was responsible to analyse the security incidents quickly and understand the severity of incident. Adhere to the agreed SLA with