Naeem Imtiyaz kathawala

Real-time security incidents and checking whether it's true positive or false positive and raising tickets for true positive incidents & eliminate false positives and provide a detailed view to the client with the impact and recommended actions.
● Performing Real-Time Monitoring, Investigation, Analysis, Reporting and Escalations of Security Events from Multiple log sources and annotating them accordingly.
● Preparing Daily Incident reports on a weekly and monthly basis and attending huddle calls with client on a daily basis.
● Analyzing alerts and escalating to the onshore team if required.
● Fine-tuning Alerts and suggesting new Use cases.
● Analyzing Firewall base alerts and escalating to the onshore team if required.
● Taking weekly incident calls with clients.
● System Health checkup on a daily basis and reporting to admin team on daily basis.
● Conduct base-level analysis to determine the legitimacy of the file, domains, IP address reputations and emails using online resources Such as Virus Total, URL Void, IPVoid, and URLscan.
● Responsible for Incident validation, Incident analysis, escalate high-severity Incidents to L2/L3/Customer for remediation’s based on SLA expectations.
● Integrating conditions, and applying inline filters, and creating active channels, to make the investigation process reliable.
● Drafting shift hand-overs.
● Good understanding of security solutions like Anti-virus, Firewall, IPS/IDS, Email Gateway, Proxy etc.;
● Experience with ArcSight SIEM tool for logs monitoring and analysis Service Now ticketing tool for incidents response.
● Worked in a 24x7*365 Security Operations Center.
● Act as first-level support for all Security Issues.
● Creating tickets on service now and assigning it to the respective team and taking the follow-up until closer
● Have experience in configuring SIEM tools to collect logs from various network devices.
● Creation/modification/fine-tuning of ArcSight resources such as User Administration, Dashboards, Active Lists, Filters, and Reports (Queries and Trends).
● Coordinate with networking teams to maintain and establish communication to remote ArcSight Connectors.
● Investigate malicious phishing emails, domains, and IPs using Open-Source tools and recommend proper blocking based on analysis.
● Upgradation of ArcSight Connectors.

am having 3 years of experience in the IT domain. Professional and skilled Security Engineer with 2 years of experience in security technologies efficiently in a demanding and dynamic work environment with Incident Handling and Response management skills Certified SIEM with ArcSight, Splunk. Network Security professional with knowledge of various security products. Possess good communication and customer service skills. Ability to work under pressure, in adverse settings and fix emergency issues. Enthusiastic and hardworking with good critical thinking and interpersonal skills.
Seeking a challenging position as a Security Analyst role in IT Information Security domain which utilizes technical expertise, leadership and analytical skills to drive organizational performance.

● Bachelor of Engineering from North Maharashtra University Pass in First-class with Distinctions.
● First Class in Diploma in Jamia Polytechnic from Maharashtra State Board of Technical Education
● Second Class with distinction in SSC from Gujrat University.