Naga Ratna Siri Devisetty
Cognizant Technology Solutions, CTS
Dallas,TX
2027
years of professional experience
Dynamic Technical Lead with extensive experience at Cognizant Technology Solutions, specializing in Fortinet SIEM architecture and deployment. Proven track record in enhancing identity-centric monitoring and automating incident response, achieving a 40% reduction in false positives. Adept at collaborating with cross-functional teams and driving strategic security initiatives.
Work History
Technical Lead
1 Year 3 Months- Led technical design reviews and aligned solutions with business requirements and architecture standards.
- Led the end‑to‑end architecture, deployment, and scaling of FortiSIEM across multi‑site enterprise environments, including Supervisor, Worker, and EventDB clusters supporting high‑EPS workloads.
- Directed SIEM modernization initiatives by redesigning ingestion pipelines, retention strategies, and distributed node performance, improving system stability and query speed across the organization.
- Architected identity‑centric monitoring by integrating FortiSIEM with Active Directory, Azure AD, LDAP, SSO, MFA, PAM, and IGA platforms, enabling unified visibility across authentication and access events.
- Developed high‑fidelity identity correlation rules detecting privileged account misuse, credential harvesting, anomalous login patterns, and unauthorized access elevation.
- Built dashboards for privileged access monitoring, identity lifecycle events, and authentication anomalies, used by IAM and SOC leadership for decision‑making.
- Directed SIEM‑driven incident response processes, enabling faster triage through enriched alerts, automated workflows, and integrated case management.
- Built automation pipelines connecting FortiSIEM with ServiceNow/Jira, reducing manual ticket creation and improving escalation accuracy.
- Led root‑cause investigations using event timelines, entity correlation, and cross‑platform analytics, providing actionable insights to engineering and security teams.
- Built executive dashboards providing real‑time visibility into identity risk, SIEM health, threat trends, and detection coverage, influencing strategic security decisions.
- Collaborated with audit teams to ensure SIEM evidence integrity, log completeness, and retention compliance.
Senior Cybersecurity Engineer
- Architected identity‑centric monitoring by integrating FortiSIEM with Active Directory, Azure AD, LDAP, SSO, MFA, PAM, and IGA platforms, enabling unified visibility across authentication and access events.
- Led the end‑to‑end architecture, deployment, and scaling of FortiSIEM across multi‑site enterprise environments, including Supervisor, Worker, and EventDB clusters supporting high‑EPS workloads.
- Directed SIEM modernization initiatives by redesigning ingestion pipelines, retention strategies, and distributed node performance, improving system stability and query speed across the organization.
- Developed high‑fidelity identity correlation rules detecting privileged account misuse, credential harvesting, anomalous login patterns, and unauthorized access elevation.
- Established SIEM governance standards, including onboarding frameworks, naming conventions, correlation rule lifecycle management, and alert quality metrics.
- Managed multi‑tenant SIEM environments for MSSP or large enterprises, implementing strict RBAC, data segmentation, and compliance‑driven access controls.
- Built dashboards for privileged access monitoring, identity lifecycle events, and authentication anomalies, used by IAM and SOC leadership for decision‑making.
- Automated IAM workflows such as privileged session alerts, account disablement triggers, and access revocation, reducing response time for identity‑related incidents.
- Partnered with IAM governance teams to align SIEM detections with least‑privilege principles, role‑based access models, and compliance requirements.
Cybersecurity Analyst
- Monitored security alerts across SIEM platforms, triaging incidents and escalating suspicious activity promptly.
- Analyzed logs, network traffic, and endpoint events to identify indicators of compromise.
- Reduced SIEM false positives by 40% through correlation rule tuning and IAM‑focused detection refinement.
- Integrated FortiSIEM with Active Directory, Azure AD, LDAP, MFA, SSO, and PAM platforms for identity‑centric monitoring.
- Built identity‑focused correlation rules detecting brute‑force attempts, account lockouts, dormant accounts, MFA bypass attempts, and privilege escalation.
- Normalized IAM logs using custom parsers to ensure accurate user/entity attribution and event categorization.
- Developed dashboards for identity lifecycle events, privileged access monitoring, and authentication anomalies.
- Automated IAM‑related workflows such as account disablement, ticket creation, and MFA enforcement triggers.
- Managed day‑to‑day operations of FortiSIEM Supervisor, Worker, and EventDB nodes, ensuring stable ingestion and high availability.
- Onboarded and normalized network, endpoint, cloud, and IAM log sources using custom parsers and event attributes to improve visibility.
- Tuned EPS ingestion, event indexing, and retention policies, improving SIEM performance and reducing query latency.
- Integrated FortiSIEM with FortiGate, FortiAuthenticator, FortiAnalyzer, FortiNAC, and third‑party platforms via syslog, API, SNMP, and WMI.
- Developed dashboards, widgets, and analytics views to support SOC monitoring, threat hunting, and compliance reporting.
- Maintained CMDB discovery using SNMP, WMI, SSH, and API probes to ensure accurate asset inventory and identity mapping.
- Supported multi‑tenant SIEM environments with RBAC, data segmentation, and compliance controls.
Education
Bachelor of Techology - Computer Science
Skills
Fortinet SIEM (Architecture
Deployment
Tuning
Multi‑Tenant Management)
Log Ingestion & Normalization (Syslog
API
SNMP
WMI
Agents)
Correlation Rule Engineering & Detection Logic
Threat Hunting & Behavioral Analytics
Event Enrichment & Threat Intelligence Integration
Dashboard
Widget & Report Development
Active Directory / Azure AD Security Monitoring
MFA
SSO
Conditional Access
Identity Federation
Privileged Access Management (CyberArk
BeyondTrust
Delinea)
Identity Lifecycle Monitoring (Provisioning
Deprovisioning
Role Changes)
Privileged Session Monitoring & Access Governance
IAM‑Driven Incident Response & Automation
AWS CloudTrail
GuardDuty
IAM Logs
Azure AD
Azure Activity Logs
Defender for Cloud
Oktaa
Hipam
Ping identity
Timeline
Technical Lead
Cognizant Technology Solutions, CTS
07.2025 - CurrentRead More
Senior Cybersecurity Engineer
Cognizant Technologies Solutions
2020 - 2025Read More
Cybersecurity Analyst
HCL Technologies
2018 - 2020Read More
Jawaharlal Nehru Technological University
Bachelor of Techology from Computer Science
Read More