Rakesh Kumar

Proactive APT detection using MITRE ATT&CK, Cyber Kill Chain, and UBA. Monitor SIEM alerts, correlate events, perform root-cause analysis, and investigate incidents. Support SOC analysts and manage 24/7 SOC operations. Develop reports, dashboards, SOAR playbooks, and automation. Monitor threats, conduct vulnerability assessments and gap analysis, document incidents, and ensure compliance with security frameworks and policies.

Client reporting, gap assessments, and security framework implementation. Develop SIEM use cases aligned with MITRE ATT&CK and Cyber Kill Chain. Lead incident response, threat detection, and continuous security improvements. Integrate threat intelligence and collaborate with teams/stakeholders. Assist with complex security matters. Experienced in IBM QRadar administration, Windows/Linux integration, upgrades, parsing, mapping, and log optimization.

Rapid security alert handling and in-depth incident investigations using various tools and techniques. Conduct proactive threat hunting to detect hidden threats. Support SOC operations and organizational security goals. Optimize SIEM use cases to reduce alert noise. Correlate threat intelligence IOCs with security events to identify incidents. Prepare and present weekly/monthly progress reports to clients and senior management.

Utilized Wireshark to filter packets and block applications by obtaining their IP addresses. • Acquired skills to contribute to the implementation of an efficient blocking system. • Using Wireshark for packet analysis, aiding in the identification and management of network-related issues