Panthangi Vignesh Goud

Security Analyst with 3 years of Success in investigating security-related breaches, installing data encryption, and implementing incident response /risk assessment strategies to avert unauthorized access, proven ability to understand and follow incident response procedure in fast-paced environments. Proficient at training staff on alerting customers to possible malicious activity, resolving priority cases and creating reports that enable experts to modify security policies.

SOC Analyst (Security Operations Centre Analyst) - HCL TECH

Working on Security Monitoring and Operations. Providing operations support at the Security Operations Centre for different member firms.

• Working on the Microsoft Azure sentinel (console& web console) providing operations support at the Security Operations Centre for different member firms.
• Real- time monitoring, Investigation, analysis, reporting and Escalations of security events from multiple log sources.
• Working experience on Azure active Directory Data connectors in collecting logs and monitoring user's Authentication, New user-created, removed etc.
• Handling the complete incident management framework cycle right from incident identification, incident containment, performing root cause analysis, suggestion and implementation of preventive and corrective controls and perform network analysis as needed on a case-to-case basis.
• Monitoring and identify positive security events from Microsoft Azure sentinel dashboard, Orion during the shift hours and take necessary action for the critical events that is seen during each shift's hours with deviations for all the environments that we support.
• Identify custom reporting requirements, translate requirements into SIM technical specifications and implement SIM changes i.e., creating filters, active channel and dashboards.
• Scheduling and performing Vulnerability Scans on client networks to identify the vulnerabilities exist if any and coordinate till closure.
• Collecting the logs of all the network devices and analyze the logs to find the suspicious activities. Handling the different issues like phishing, spam, scam and malicious mail.
• Work closely with the technology risk teams to access risk and provide recommendations for improving our security posture.
• Review threat information and maintain threat repository.
• Conduct deep drive technical analysis of cyber-attacks tools, tactics, and procedures. Experience in Handling common attacks like Brute force, Ransomware, DOS and DDOS attacks Preparing Daily, Weekly and Monthly report as per client requirements.
• Experience in monitoring IDS and IPS
• Understanding the Client Specified Business Documents.
• Performing the scanning and troubleshooting the scanning related issues.
• Working on recent threats and recent Vulnerabilities.
• Filling the daily Health check list.
• Good Knowledge working with agile methodology.
• Good knowledge in MITRE Attack framework.
• Having knowledge on Kusto Query language.
• Good knowledge on networking concepts including OSI layers, subnet, TCP/IP, DNS, DHCP etc.
• Good understanding of security solutions like Firewalls (Palo alto, checkpoint and Fortinet), DLP, Antivirus, EDR, IPS, IDS, E-mail security etc.
• Good in analyzing Spam, Phishing, TTP mails using Email gateways like Proof point and Mimecast.
• Handling the different issues like Phishing, Malware, Spam, Scam, Virus, Trojan and malicious mail etc.
• Collecting the logs of all the network devices and analyze the logs to find the suspicious activities.
• Real-time monitoring, investigation, analysis, reporting and escalations of security events from multiple log sources.
• Hands of experience on remediations of malware and security monitoring and operation. Attending trainings on IBM Qradar, Splunk and ArcSight.

Degree - Osmania university (2021)