SIEM (Qradar)
Madhu Gowda Basavaraj
IT Security Analyst
Olympic,,Hong Kong
Summary
Cyber security professional with 5+ years of progressive experience as IT Security Operation Engineer for Level-1 and Level-2 activities. Good understanding of relevant topics such as incident lifecycle & Security Operations Center (SOC). Knowledgeable in security technologies such as e-mail security, Anti-Virus, DLP, & Proxy. Familiar with the behaviour and functionality of protocols like DNS, DHCP, TCP & UDP. Exposure to tools such as IBM Qradar, Splunk, Symantec security cloud, Cisco CES & FireEye, Qualys. Ability to interact effectively with different infrastructure teams like network systems, compliance, database, exchange and firewall. Organized and dependable candidate successful at managing multiple priorities with a positive attitude. Willingness to take on added responsibilities to meet team goals.
Overview
2
2
years of professional experience
4
4
Certifications
3
3
Languages
Work History
IT Security Analyst
Capgemini Hong Kong Ltd.
3 2020 - 3 2024
- Analyzed network traffic and system logs to detect malicious activities. Implemented security measures to reduce threats and damage related to cyber attacks.
- Reduced potential security risks by proactively monitoring systems for suspicious activity and taking appropriate action.
- Identified areas requiring improvement through detailed analysis of past incidents, preventing future occurrences through targeted remediation efforts.
- Administered and monitored firewalls, intrusion detection systems and anti-virus software to detect risks.
- Collaborated with cross-functional teams to address complex security incidents, minimizing potential damage.
- Drafted security reports and metrics to track security performance and strategize improvements.
SOC Analyst
TUV Rheinland (India) Pvt. Ltd.
09.2018 - 10.2019
- Identified root causes of security breaches through thorough investigation and analysis of log data.
- Conducted comprehensive security assessments to identify risks and recommend mitigation strategies.
- Enhanced network security by monitoring systems for potential threats and vulnerabilities.
- Maintained accurate documentation of all SOC activities, facilitating knowledge sharing across the organization.
Security Analyst
P5 Software Pvt. Ltd.
05.2017 - 09.2018
- Coordinated incident response efforts across multiple departments, fostering teamwork in resolving complex issues effectively.
- Streamlined incident response procedures for quicker threat mitigation and improved system uptime.
- Analyzed log files for anomalies, identifying potential intrusions or malicious activity before significant damage occurred.
Education
Master of Science - Computer And Information Sciences
Visvesvaraya Technological University
04.2001 -
Bachelor of Science - Computer And Information Sciences
Kuvempu University
04.2001 -
Skills
Email and Malware analysis
Threat Intelligence Analysis
Penetration Testing
Vulnerability Assessment
Security Information and Event Management
Malware Analysis and Reverse Engineering
Incident Response
Security controls
Websites
Roles And Responsibilities
SIEM solution
- Monitoring and analysing security events, logs, incident investigation (on Remedy), and reporting.
- Analysing raw logs from critical servers and machines to find abnormalities in organization network logs.
- Acting on the incidents within the provided SLA.
- Identifying relevant MITRE ATT&CK techniques and tactics that align with organization’s infrastructure, applications, and data.
Phishing/SPAM solution
- Investigate & remediate Phishing/SPAM emails reported by users/customers through static and dynamic SPAM analysis of malware using different tools.
- Monitoring & analysing risky sign-in alerts (High-risk users) in Azure.
- Conducting Phishing simulation activity.
- Fraudulent/Phishing Website Handling (NetCraft).
- Handle the logs detected by EDR solution.
- Review and approve change/service requests.
Certification
CompTIA Security Plus
Projects
- Phishing Email hanbdling and SIEM solution.
Parent: Capgemini Hong Kong Pvt. Ltd. Client: Cathay Pacific Airways Limited. Duration: 03/2020 - 03/2024
- TUV OpenSky Managed Threat Detection for Berkshire Health Systems (BHS).
Parent: TUV Rheinland, Duration: 09/2018 - 10/2019
- SIEM solution.
Parent: P5 Software Pvt. Ltd. Client: Bank Of India (BOI). Duration: 05/2017- 09/2018
Personal Information
Visa Status: Employment visa
Software
Cisco CES (ESA & SMA)
Symantec- Email Security (MessageLab)
Microsoft Azure
FireEye
Qualys
Virus Total
IBM X-Force
Cisco Talos
Trend Micro
Timeline
SOC Analyst
TUV Rheinland (India) Pvt. Ltd.
09.2018 - 10.2019
Security Analyst
P5 Software Pvt. Ltd.
05.2017 - 09.2018
Master of Science - Computer And Information Sciences
Visvesvaraya Technological University
04.2001 -
Bachelor of Science - Computer And Information Sciences
Kuvempu University
04.2001 -
IT Security Analyst
Capgemini Hong Kong Ltd.
3 2020 - 3 2024
Similar Profiles
Dhanshree MhatreDhanshree Mhatre
SAP Security and Basis Administrator at CAPGEMINI HONG KONG LTDSAP Security and Basis Administrator at CAPGEMINI HONG KONG LTD
Tiffany ChanTiffany Chan
Senior Ecommerce Manager at A.S. Watson Retail (Hong Kong) Limited - Hong KongSenior Ecommerce Manager at A.S. Watson Retail (Hong Kong) Limited - Hong Kong
Simran BalSimran Bal
Bartender at Momentai Hong Kong, Ho Lee Fook Hong KongBartender at Momentai Hong Kong, Ho Lee Fook Hong Kong