Pallavi Rawarkar

Background

About Pallavi Rawarkar

Responsibilties: • The security analyst monitors security events from the various SOC entry channels (SIEM, SNOW Tickets, Email and Phone), based on the security event severity. • Log analysis from different network devices such as IDS, IPS, firewall & proxy, etc. • Creating Reports (Daily, Weekly, and Monthly) as per requirement. • Rule/use case fine tuning based on analysis and client requirements, differentiate false positive and true incident. • Checking Risk logs on Symantec Endpoint Protection and apply scans on assets. • Understand Cyber Kill Chain process and Incident Handling. • Working on assign ticket queue and understanding and exceeding expectation on all tasked SLA commitments. • Monitor real-time security events on SIEM (QRadar, Arcsight) console and Event Analysis and Investigating and mitigation. • Ensure the integrity and protection of networks, systems, and applications by technical enforcement of organizational security policies, through monitoring of vulnerability scanning devices. • Knowledge about MITRE ATT & CK tactics. • Administration Task : QRadar Asset Management, Application Data Management, Use Case Creation, Log Source Management- Training to new joinees- Represent cases infront of customer calls. • Phishing mail analysis and respond(EOP) using tool CofenseTriage. • Raising request to Exchange team for releasing quarantined emails, purging suspicious emails and for blocking any suspicious domain address. • Checking particular emails delivery using Microsoft Threat Explorer. • Open source tools used: Symantec site review, Urlscan.io, IBM-Xforce, AbuseDB, Virus total, IPvoid, MX Toolbox, etc. • Experience with automated and manual web application vulnerability assessments. • Experience with various security assessment tools such as Nessus, Nmap, Kali Linux, Burp Suit, Qualys Guard, Nexpose, SQLMAP, Nikto, Metasploitable. • Strong understanding of penetration testing methodologies such as OWASP top 10. • Knowledge of OSI, TCP/IP model and network basics. Capable of independently learning new technologies by utilizing available documentations and vendor support resources. Excellent team player with strong written and verbal communication skills.