Rakesh Khaitan

" Monitor client IP space tracking security events with internal application looking for suspicious activity.

" Monitored network performance and provided network performance statistical report for both real time and historical measurement.

" Monitoring and analyzing logs and alerts from a variety of different technologies (IDS/IPS, Firewall, Proxies, Anti-Virus, SIEM, etc&), across multiple platforms.

" Escalating and explaining security incidents.

" Monitor information security alerts though the use of SIEM to respond, triage, and escalate as needed.

" Participate in root cause analysis of critical events for improving preventative and reactive processes.

" Works with senior leadership to tune and maintain the SIEM (Security Information and Event Management) as needed; develop SIEM use cases to enhance monitoring capabilities.


" Proactive monitoring of security and network alerts in HP OpenView, HPBSM, HPArcSight, IBM Qradar, Bluecoat Packet shapers and CRM, HPSM tickets and notifying and escalating to respective teams to make sure all alerts and tickets are resolved in defined SLA.

" First level trouble shooting on Cisco switches, cisco and juniper & Fortigate firewall, ASA Firewall, wireless controller, access point, F5 etc. Analyzing of security alert and events on various tool like Sourcefire, F5 and Bluecoat etc and blocking them. Experience with Nessus/Security Center, Wireshark, SIEM tool suite, FireEye and HP ArcSight and IBMQradar SEIM tools.

" Preparing daily, weekly and Monthly incidents, security events and SLA Reports. Tape backup management, Data center management like inventory of devices and racks. Managing access to data center.

" Coordinating with other team to define and review standard procedure for NOC & SOC environment as per client requireme nt. Along with supervisory role to manage team shift roaster, Defining NOC, SOC new processes and their standard documentation along with continuous process improvement.