Srikanth Reddy Revuru

Results-driven Endpoint Security Engineer with 5 years of experience in a 24x7 Managed Security Services (MSS) environment, specializing in Symantec Endpoint Protection Manager (SEPM), EDR/XDR, Detection Engineering, Threat Hunting, and Incident Response. Hands-on experience managing enterprise endpoint security solutions including Symantec Endpoint Protection (SEP), Symantec EDR, and Symantec Endpoint Security Complete (SESC) - Application control / Allowlisting across large-scale production environments. Proven expertise in Symantec Endpoint Protection Manager (SEPM) policy creation, console administration, and proactive threat hunting.

Recognized for maintaining 100

Endpoint Security Administrator - Cybersecurity - Sonata Software Limited - Bangalore

Responsible for administering enterprise Endpoint Security solutions with a primary focus on Symantec Endpoint Protection (SEP), Symantec Endpoint Detection Response (EDR), and Application Control across global enterprise environments. Supported day-to-day endpoint protection, incident investigation, threat hunting, Policy administration, malware response, and enterprise endpoint compliance across large-scale production environments.

• Administered Symantec Endpoint Protection (SEP) and SEPM for 85,000+ endpoints, ensuring endpoint security compliance, policy enforcement, and centralized threat protection.
• Led SEPM upgrade from version 14.3 RU9 to 14.3 RU10, performing compatibility validation, deployment planning, risk assessment, and post-upgrade health verification.
• Successfully migrated 30,000+ endpoints from Trend Micro to Symantec Endpoint Protection, ensuring smooth agent deployment, policy migration, and endpoint onboarding.
• Administered SEPM security policies including Virus Spyware Protection, Intrusion Prevention, Application Device Control, Exceptions, and Tamper Protection.
• Managed SEP agent deployment, upgrades, installation, communication, policy synchronization, and definition updates across enterprise endpoints.
• Managed SEPM replication, database backup, disaster recovery, and high availability to ensure service continuity.
• Investigated and resolved malware detections, false positives, and recurring security issues, including RCA and coordination with SOC/Infrastructure teams.
• Managed Symantec EDR for endpoint monitoring, security alert investigation, threat detection, and incident response.
• Investigated malware, suspicious processes, registry modifications, PowerShell activity, persistence, and privilege escalation using endpoint telemetry and process lineage.
• Performed IOC-based investigations using file hashes, IPs, domains, URLs, registry entries, scheduled tasks, services, and process relationships.
• Tuned Symantec EDR alert thresholds to reduce false positives and improve detection quality and analyst efficiency.
• Monitored and investigated Symantec EDR alerts, prioritizing critical threats and coordinating incident responses with SOC and security teams.
• Managed Symantec ICDM Application Control policies for enterprise application allowlisting and endpoint protection.
• Configured application control rules using file hash, digital signature, file path, publisher certificate, and file reputation.
• Reviewed application requests, policy exceptions, and software onboarding while maintaining security compliance
• Investigated blocked application events and policy violations, tuning allowlisting rules to reduce false positives.
• Collaborated with Infrastructure, Desktop Engineering, and application teams to implement enterprise-wide application control policies.

Bachelor of Technology - B.Tech - Audisankara College of Engg & Tech