Rakesh N

ECI is a provider of managed, cyber and data solutions for companies. •Leading incident response efforts for priority alerts to mitigate security breaches, conduct investigations, and identify root causes and handling rotational shift in 24/7 security operation center environment. •Monitoring and analyzing security events and incidents using tools such as security information and event management (SIEM), Azure Active Directory, Exchange portal, O365 Admin Centre, Email gateways, Endpoint Detection and response. •Email Security monitoring and analyzing suspicious emails reports by users using email security tools such as Proofpoint. Additionally, creating policies and blocking IOCs in email security tools. Also utilizing TAP and TRAP for better investigation and Remediations. •Create and manage policies in DLP and Web Proxy tools as per user requests and security standards. •Internal Website, webservers certificate management by using certificate management platform Sectigo. •Working closely with analysts to provide expert advice and guidance on cyber security alerts and various incidents from different technology platforms. •Performing Proofpoint threat activity by gathering all the Threats from TAP on weekly basis. Validating Endpoint encryption, Inactive machines from SCCM. Remediation of multiple Exabeam Advance Analytics threats and Abnormal alerts. •Acting as point of contact for clients, other stakeholders within the organization, including senior management. •Working closely with analysts to provide expert advice and guidance on cyber security alerts and various incidents from different technology platforms.

During this internship i had a chance gain theoretical knowledge and Hands-on skills to the various approaches & tools such as Cynet XDR & Threat Connect Threat Intelligence, Vmware EDR LAB, MITRE & ATT&CK Framework,Incident Response Approaches.