Pooja B B

Around 3 Years of hands-on Experience in Security Operations. Incident Response, Endpoint Security, Phishing analysis, Threat Intelligence, Network Security. Good understanding of log formats of various devices such as Web sense, Vulnerability Management Products, IDS/IPS, EDR, Firewalls, WAF, Proxy, Routers, Switches, OS, DB Servers, and Antivirus. Experience in Information Security with emphasis on security operations, Log monitoring, Log management, incident management, and security event analysis through Sentinel & Splunk SIEMs. Analyzing the detections and incidents from EDR solutions like Crowd Strike, MS defender and containing the machines and providing real-time response. Having experience in handling incident response in Linux OS and troubleshooting accordingly. Having experience in developing Security content like rules, reports, dashboards in SIEM. Experience in generating Daily, Weekly & Monthly Reports from Sentinel and Splunk and communicating to stakeholders. Agile in investigating security threats such as Malware Outbreaks, DDOS, OWASP T-10 and Phishing Analysis on the network. Having knowledge in integrating log sources along with SIEM and parser creation. Performing the effective phishing analysis and performing phishing campaign using Knowbe4.