prem raj

• Lead end-to-end incident response (triage, analysis, containment, eradication, recovery, and
reporting) across enterprise and AWS environments using LogRhythm SIEM, endpoint security tools,
and cloud security logs, serving as escalation point for complex investigations.
• Reduced false positives by 30% through continuous fine-tuning of SIEM correlation rules and
detection use cases, improving alert accuracy for the SOC team.
• Conduct proactive threat hunting and IOC (Indicator of Compromise) validation using threat
intelligence sources and MITRE ATT&CK framework to identify malicious infrastructure, attack
patterns, and suspicious activity missed by existing monitoring controls.
• Perform quarterly vulnerability assessments for 750+ endpoints, coordinating with infrastructure
teams for timely remediation; support audit and compliance activities through documentation and
evidence collection
• Administer AWS WAF rule design and optimized 15+ policies against OWASP Top 10 threats, and
CSPM remediation activities using Prisma Cloud.
• Coordinate with infrastructure, network, and application teams to remediate security incidents and
reduce organizational risk exposure.
• Investigate Trend Micro Deep Security alerts, including intrusion detection and File Integrity
Monitoring (FIM) events.

• Installed and configured LAN infrastructure.
• Handled installation, maintenance, and troubleshooting of routers and switches.
• Performed vulnerability assessments using tools like Nessus, Advanced IP Scanner,
and Nmap .
• Conducted surveillance activities and security audits.
• Installed, maintained, upgraded, and monitored the performance of all computers
and software.
• Managed installation and maintenance of local servers.
• Created and assigned system login credentials including user IDs and passwords.
• Administered and managed the entire Google Workspace (G Suite).
• Installed, configured, maintained, and enforced policies for firewall (Fortinet), VPN
(FortiCloud), and antivirus solutions (Malwarebytes and McAfee).
• Executed end-to-end local backups using Iperius Backup and cloud backups with
Acronis.
• Ensured system security through implementation of access controls, regular backups,
antivirus solutions, and firewalls.
• Prepared technical documentation, user manuals, and IT policy documents.

• Worked in Information security(includes vulnerability analysis and SIEM)