SOC (Team Lead-Cyber Threat Intelligence)

• ● People Management based on projects and other Administration work
• ● Handling CTI, Vulnerability Assessment and Sandboxing services.
• ● Demonstrable knowledge of attack vectors, threat tactics, attacker techniques, and the Cyber Kill chain.
• ● Use of news aggregator to get the insights about latest vulnerability, breaches, malware campaigns, Indicator of compromise and Security Highlights
• ● Threat Intelligence products and administrator
• ● Perform daily review of bulletins, alerts, incident reporting documents and tracking excels.
• ● Working Knowledge of TAXII and STIX.
• ● Setting up Threat Intelligence Platform and its integration. Developed a custom responders and analyzers.
• ● People Management based on projects and other Administration work.
• ● Bring the productivity in the team using automation skills also with low-code technologies ie MS flow and incoming webhooks.

Threat Researcher

● Dynamic and Static Analysis of Windows Malware Samples in Controlled Environment

● Working knowledge of file formats such as PE,PDF,NON-PE,Doc etc.

● Experience with memory dumps. Knowledge of windows Internals & API.

● Provides incident response support, Identifying & prioritizing potential threats.

● Supports computer forensics & malware analysis.

● Passion for reverse engg & taking on the bad guys.

● Solve customer and internal query.

Software Developer(Malware Analyst)

● Develop Android Apps

● Dynamic and Static Analysis of Android/Windows Malware Samples in Controlled Environment.

● Knowledge of networking protocols such as TCP/IP, DNS, SMTP etc.

● Creating signatures for detecting malware through static and dynamic analysis.

● Analyzing new malwares and studying its behaviors for classification.

● Making Reports describing the threat.

● Help Android Developers by providing code from APKs.

● Performing assigned tasks with diligence, producing work of good quality and being a reliable work.

● Create yara rules to detect similar behaviour of malware sample.

● Reading blogs of various security experts.