Gadibavi Naresh Kumar Reddy

Security Analyst with 4.2 years of Success in investigating security-related breaches, installing data encryption, and implementing incident response /risk assessment strategies to avert unauthorized access, proven ability to understand and follow incident response procedure in fast-paced environments. Proficient at training staff on alerting customers to possible malicious activity, resolving priority cases and creating reports that enable experts to modify security policies.

SOC Analyst - Accenture - Bangalore

(2022-03)

• Managed centralized log collection, parsing, and correlation using Splunk Enterprise Security and Microsoft Azure Sentinel to detect and analyze security incidents across enterprise environments.
• Developed, fine-tuned, and optimized correlation rules and detection use cases to enhance threat visibility and reduce false positives.
• Administered and monitored endpoint security platforms including Microsoft Defender ATP, CrowdStrike Falcon, and Symantec AV across Windows and Linux systems.
• Conducted endpoint investigations, performed host isolation, and executed containment actions using EDR tools during active security incidents.
• Investigated phishing campaigns by analysing email headers, attachments, URLs, and sandbox verdicts using Office 365 Defender and email security controls.
• Managed Office 365 Email Security configurations including Safe Links, Safe Attachments, and DLP policies to prevent data leakage and malicious content delivery.
• Created custom detection rules and KQL queries in Azure Sentinel for advanced threat detection and log analysis.
• Performed forensic investigations to identify Indicators of Compromise (IoCs), attack vectors, and adversary techniques mapped to the MITRE ATT&CK framework.
• Monitored and investigated authentication anomalies in Azure AD, including interactive and non-interactive sign-in events.
• Conducted application vulnerability assessments aligned with OWASP standards, using tools such as AppScan and WebInspect.
• Assisted in risk assessments and threat modelling exercises to identify potential security gaps.
• Prepared compliance and endpoint security posture reports and coordinated remediation efforts with infrastructure teams.
• Utilised ServiceNow and JIRA for incident tracking, documentation, SLA management, and escalation handling.
• Collaborated with internal stakeholders and cross-functional teams to ensure timely remediation and incident closure.

Post Graduation - Annamacharya Institute of Technology and Sciences (2015)