GOUTHAM CHEEDARA

CompTIA Security+ certified Cybersecurity Analyst with work experience. Specialized in incident response, malware analysis, endpoint security, and phishing analysis. Experience in hands-on projects in monitoring and analysis of potential and active threats using security tools and processes.

• 6+ months of experience in cyber security implementations.
• Responsible for SOC operations in 24x7 environment.
• Real-time log monitoring in the Security Operations Center from different devices such as firewalls, IDS, IPS, operating systems like Windows, Linux, Windows Servers, System Application, Databases, Web Servers, and Networking Devices .
• Excellent working knowledge on IBM Resilient and Jira ticketing tools.
• Ensures the integrity and protection of networks , systems, and applications by technical enforcement of organizational security policies, through the performance of formal risk assessments, and internal threat analysis regarding SOC environment with the use of SIEM tools .
• Good understanding of developing the complex Use Cases on the IBM QRadar and Splunk Enterprise SIEM Solutions.
• Responsible for monitoring security system and diagnoses malware events to ensure no interruption of service. Identifying potential threat , phishing attacks , anomalies, and infections.
• Hands on experience in using various tools like OpManager, ZAP Proxy, NMap, Hydra, Tenable Nessus, , SOC Radar and Kali Linux.
• Monitoring network traffic for security events and perform triage analysis through EDR solutions such as SentinelOne and CrowdStrike Falcon to identify the timeline of the incident and affected hosts.
• Analyze threat patterns on various security devices and validation of False/True positive security incidents.
• Responding to cyber security incidents by collecting, analyzing, providing detailed evidence (network log files) and ensure that incidents are recorded and tracked in accordance with its guideline and requirements.
• Implement processes and manage Nessus to identify vulnerabilities and track their remediation with the system owner.

• CompTIA Security+
  
• Splunk Core Certified User (in progress)
  
• Splunk 7.x Fundamentals Part 1, (in progress)
  
• CySA+ (In Progress)