Reshma Nagenahalli

Around 4+ Years of hands-on Experience in Security Operations. Incident Response, Endpoint Security, Phishing analysis, Threat Intelligence, Network Security. Good understanding of log formats of various devices such as Web sense, Vulnerability Management Products, IDS/IPS, EDR, Firewalls, WAF, Proxy, Routers, Switches, OS, DB Servers, and Antivirus. Experience in Information Security with emphasis on security operations, Log monitoring, Log management, incident management, and security event analysis through Sentinel & Splunk SIEMs. Analyzing the detections and incidents from EDR solutions like Crowdstrike, MS defender and containing the machines and providing real time response. Having experience in handing incident response in Linux OS and troubleshooting accordingly. Having experience in developing Security content like rules, reports, dashboards in SIEM. Experience in generating Daily, Weekly & Monthly Reports from Sentinel and Splunk and communicating to stakeholders. Exposure to Ticketing tool like Service Now, Jira. Agile in investigating security threats such as Malware Outbreaks, DDOS, OWASP T-10 and Phishing Analysis on the network. Having good understanding of Mitre Attack Framework, and Cyber kill chain to effectively respond and mitigate the threats proactively. Having knowledge in integrating log sources along with SIEM and parser creation. Performing the effective phishing analysis and performing phishing campaign using Knowbe4. Identifying emerging threat tactics, techniques and procedures used by malicious cyber actors and publish actionable threat intelligence for business and technology management. Creating playbooks according to NIST IR framework. Providing the Knowledge transfer to the newly joined team member. Working in Security Operation Centre (24/7), monitoring of SOC events, Detecting and Preventing the Intrusion attempts. Worked for MNC clients, interacting directly with the customers, presenting SOC status reports and completing the action items.