Kesav Arvind

Background

About Kesav Arvind

Experience on SIEM tools like monitoring real- time events using Qradar, Azure Sentinel, Logrhythm. Good Knowledge on OSI Models, Protocols, security concepts, WAN and LAN concepts, Routing protocols, Firewall security policies, VPN.IDS/IPS – CheckPoint, HP Tipping Point, Check Point IPS.Having excellent knowledge of Intrusion Detection. various operating systems (Windows/UNIX), and web technologies. Having ability to read and understand packet level data Intrusion detection and prevention and Network Security Products (IDS/IPS, firewalls, etc.) Host Security Products (HIPS, AV, scanners, etc.).Experience on performing log analysis and analyzing the crucial alerts at immediate basis through SIEM.Handling critical alerts from Symantec Endpoint Protection and working for resolution.Handling alerts from Crowdstrike EDR and investigation.Phishing and Spam Email analysis through Ticketing tool live time.Preparing Vulnerability Assessment reports and remediation steps post assessment using Tenable Nessus and Qualys Guard.Having knowledge on vulnerability management. Exposure to Ticketing tool like Service Now.