Cyber Security Analyst

•   Understanding and hands on experience Arcsight, McAfee Nitro SIEM, IBM
Infoshpere Guardium (DAM) tools
•   Understanding and Hands on Experience on different tools like Fire Eye, McAfee
EPO, TippingPoint IPS console, Imperva WAF console, Symantec Messaging
Gateway, Forcepoint Proxy, Trend Micro DDI, Ticketing Tools (Remedy).


Database Activity Monitoring: Worked with Guardium database Monitoring tool,
Security Monitoring, Preparing Policies on Guardium tool, Installing S-TAP Agents
on different DB Servers, Patch Management of Guardium Tool.
•   Security and Risk Management: Monitoring logs from different log sources and security devices (IPS, Firewall, Proxy, etc.) and detecting suspicious/malicious
activities, vulnerabilities found on customer network.
•   Incident response: Investigating security threats using SIEM tool, raising incidents
and providing recommendation steps for resolution of such issues to the concerned
teams.
•   Threat management: Analysing the threat and incident generated through the different vulnerability present, anomaly behaviour and other activities leading to an
incident finding the root cause(RCA) for the generated incident to determine whether
it's false or true positive.
•   Preparing daily incident reports, KPI report, and other reports: Preparing the weekly, biweekly, monthly analysis report after analysing the customer network for
attacks and intrusion after segregation of false positives from the vast number of events detected by various devices.
•   Vulnerability Management: Taking care of Vulnerability Assessments daily,
weekly and Monthly basis as per the audit requirements and to make sure that reported
vulnerability has been patched up or not, by coordinating with different stack holders.
•   Log analysis of Different Log sources: Monitoring all the consoles like Fire Eye,
Tipping Point IPS console, Imperva WAF console, Symantec Messaging Gateway,
Force point Proxy for more information.
•   Change Management: Raising Change Request for Integration Guardium STAP
agent Installation and coordinating with different Teams.
•	Trend Analysis: To work on the events trend to find out the behaviour of the traffic
in a time span(Log Hunting)
•   Creating use cases/correlation rules based on the recent threats, IOCs, trend/behaviour
of the traffic
•   Raising PMR Request and Coordinating with IBM TAC Team for the extended
support.
•   Interaction with the process owners to understand the nature of business, the controls
and possible risk.
•   Report Generation, Dashboard Creation, Use case Development in SIEM Tool based
on the behaviour/trend of the traffic in a time span(Log Hunting)
•   Ensuring that SLA is not violating and make sure there are no customer complaints
•   Preparing SOP for the references/standardization of work process.
•   Providing training (KT) for new joiners on SIEM, Different consoles and day today
activities that we are taking care.
•   Conducting daily stand up meetings and providing the inputs on road block incidents,
discussing daily tasks
•   System Administrator: Managing Firewall "Dell Sonicwall TZ210 and TZ300",
Install and Configure Windows Servers 2008 R2 and 2012 R2, Managing Active
Directory, Manging DHCP, Etc

Find out detailed information about Gopal Patil, Cyber Security Analyst in Pune, MH

Gopal Patil: Cyber Security Analyst in Pune, MH

Gopal Patil

IBM

college Of Engineering Hubli

KLE's Munavalli Polytechnic Hubli