Sai Raghav Rohith

My job at IBM initially as a Security Analyst and later as a Technical consultant required me to identify, analyze, and remediate potential threats to my client's environment. I was mandated to have sufficient security industry knowledge that evolved with current and emerging threats.
I performed security monitoring, investigations, and analysis of events to mitigate internal and external threats to the environment. Additionally, I was also collaborating with the Cyber Security Rapid Response Incident Response Team and Managed Security Service providers to support the detection, triage, incident analysis, containment, remediation and reporting of events and incidents to ensure the confidentiality, integrity and availability of information all on the Security Incident and Event Management tool, Azure Sentinel, as requested by our Swedish Client.
I was responsible for analyzing and responding promptly to security threats from Firewalls, Endpoint Detection and Response, and other security threat data sources within the documented SLA.
Additionally, every action was documented in cases to effectively communicate information to the client as well as IBM.
Because of the nature of cybersecurity jobs, especially in the SOC domain, I was required to resolve problems independently and understand escalation procedures.
· Conduct Security Monitoring activities to provide Security Depth visibility into potential known and unknown threats that may pose a risk to the IBM environment.
· Participate in security incidents and act as the technical Subject Matter Expert during significant security incidents.
· Utilize analytics to identify potential threats to the environment.
· Detect, respond, mitigate, and report on cyber threats/incidents that may impact the environment.
· Collaborate with technical leads: Engineering, Operations, Service Desk, Applications and BISOs on matters related to security monitoring across a global footprint.
· Collaborate and serve as liaison to Managed and/or Unmanaged Security Service providers.
· Conduct Operations surrounding cyber security incident response technologies including network logging and forensics, security information and event management tools, security analytics platforms, log search technologies, and host-based forensics as applicable.
· Act as an internal information security consultant to the business and technology units, advising on risks, threats and control practices related to Rapid Response.
· Assist in development and knowledge sharing within the team.
· Assist in security console tuning
· Assist in security event oversight to ensure the team is delivering a quality product
· Identify and share threat intelligence that impacts IBM and their customers or products
· Perform threat hunts that target adversary TTPs