Quest to work in an atmosphere that enables me to widen the spectrum of my knowledge. Learning & acquiring new techniques/methods in the industry, while sharpening the inherent skills on a regular basis.
10 years of Experience in Cyber Security focusing on Security Monitoring (SIEM), Vulnerability Management, Application Security, Risk & Compliance. Currently engaged on Implementation project with Government of Bahrain.
Led the deployment and integration of DEVO SIEM components, ensuring seamless collection and analysis of log data from diverse sources.
Managed and guided the implementation of log source integrations into DEVO, optimizing data ingestion pipelines for real-time security monitoring.
Developed and customized content for DEVO, including creation of tailored alert configurations, real-time event correlation, and automated incident response triggers.
Designed and implemented custom dashboards in DEVO for enhanced visibility, enabling proactive threat detection and quicker response times.
Collaborated with cross-functional teams to ensure alignment with security requirements and streamline data flows across different systems.
Provided leadership and mentorship to the team throughout deployment phases, ensuring timely and accurate delivery of SIEM solutions.
Monitored and fine-tuned DEVO’s performance, making adjustments based on emerging threats and evolving security needs.
Managed team of 7+ members within Vulnerability Management as well as SOC environment for Oil & Gas client in UAE
Professionally trained on AWS Solution Architect Associate.
Professionally certified on Splunk power user and trained on Splunk admin.
Experience of working as a Consultant for Client with respect to SIEM, Vulnerability Management, handled Proposal for New CR and POC’s.
Experience working in Defense, Banking and Financial, Energy, HealthCare, Oil & Natural Gas and Engineering domain.
Experience of working under MSS for multiple clients simultaneously as well as service delivery SPOC for individual client.
Excellent communication and presentation skills & ability to work independently or as a part of a team.
Experience of being a Subject Matter Expert (SME) for the team with multiple domains like Access control, Investigation, Application Security, Security Architecture.
Developed and maintained professional relations with service providers, Vendors, Stake holders and Client. Handled client escalations and worked on RCA.
Worked on process improvement, SOP creation. Preparing Daily/ Weekly/Monthly reports on the analysis /incidents/ and on monthly data required for Clients.
Leading SIEM and security analytics capabilities using Devo platform for enterprise clients.
Advising on end-to-end integration of cloud-native security monitoring and log management solutions.
Designing and implementing advanced detection use cases, custom threat models, and SOC workflow optimization.
Providing in-depth expertise during major incident investigations and post-incident reviews.
Training and mentoring client teams on security best practices and Devo platform administration.
Sr. Cyber Security Consultant
KPMG
12.2021 - 07.2024
Responsibility to manage End to End Vulnerability Management Workflows.
Scanning & Identifying vulnerabilities associated with digital IT assets connected to the network.
Assisting with prioritizing & remediation of identified vulnerabilities utilizing operational best practice along with business contextualization.
Performed assessments of security controls using NIST special publication 800-53A Rev4, identify weaknesses and track remediation activities in plan of action & milestone.
Determine the risk levels of information system and categorize according to the sensitivity and importance of the information contained in these systems.
Configuring log generation and collection from a wide variety of products distributed across categories of servers, network devices, security devices, databases, and apps.
Categorize the messages generated by security and networking devices into the multi-dimensional ArcSight normalization schema.
Investigate and identify events, qualify potential security breaches, raise security incident alerts, and perform technical & management escalation.
Recommended security strategies based on real time threats.
Installation of Connectors and Integration of multi-platform devices with ArcSight ESM, Develop Flex Connectors for the ArcSight Unsupported devices / Custom Apps.
Develop content for ArcSight like correlation rules, dashboards, reports and filters, Active lists and Session lists.
Creating alerts and reports as per business requirements and Threat modelling with specific security control requirements.
ArcSight asset modelling implementation, it is used to populate asset properties in Correlation rules and reports.
Collection of Evergreen data for multiple applications from the business and used in correlation Rules for monitoring and alerting and reporting.
On-boarded 1500+ devices (Windows, Linux, IIS, DNS, DHCP, NPS, Main frame, firewall, VPN, bluecoat proxies) to ArcSight ESM for monitoring.
Troubleshooting the issues which are related to ArcSight ESM, logger, DB and Conapps performances.
Sr. Security Analyst
Accenture Solution
11.2016 - 11.2021
Segregating and correlating the logs and configuring active channel, queries, reports, filters, dashboards, and real-time alerts using SIEM tools (ArcSight & Splunk).
Malware analysis determining the root cause of the alert and execute mitigation plan.
Analysis of reported suspicious/spam emails and take prevention action.
Handled all end users reported Incidents and Change management tickets with respect to Network Security within the agreed SLA.
Performing daily health checks, creating documents for technical reference, creating reports for hours, daily and weekly, monthly.
Handling various technical aspects like project documentation, report preparation and reviewing the documents. Meeting the SLA and timeframe.
Tracing, reporting and escalating malicious activity such as policy violations, Worm Out breaks from end-to end.
Monitoring security devices like firewall and provide L1 support for the clients.
SSR4A
Unisys Global Service
03.2015 - 10.2016
Technical Engineer
IBM India Pvt Ltd
08.2014 - 03.2015
Education
Bachelor of Engineering - Information Science & Engineering
Bachelor of Engineering - Information Science & Engineering
Visvesvaraya Technological University
Extra-Curricular Activities
Represented the state at the national throw ball meet in 2010 Represented the Zonal team at the state level cricket tournament.
Bio Data
Father's Name: Ekambaram.S
Visa Status: Bahrain Resident Visa
Date of Birth: 11th August 1992
Nationality: INDIAN
Residence Permit: Bahrain Resident Visa
Productivity Tools
Devo
Tenable
Nessus
Fortify
Code DX
Prisma Cloud
Black Duck
Securonix
ArcSight
Splunk
Solar Winds
Palo Alto
Qualys guard
ITSM Remedy version 7.6 and 8.1
Service Now
Symantec DLP
McAfee NSM
Disclaimer
I hereby declare that the above-mentioned information is correct up to my knowledge and I bear the responsibility for the correctness of the above-mentioned.