Rhydham Joshi

Continuous monitoring & response to any anomalous behaviors or threats for securing Amazon Go (https://www.youtube.com/watch?v=NrmMk1Myrxc&t=4s) and Book’s Infrastructure. Building and scaling security operations team’s visibility and capability by implementing EDR solution, establishing logging standards, onboarding logs to SIEM platform, build signals/detectors to identify anomalies, create IRP documents to standardize response procedure. Vulnerability management program to reduce threat surface area by denying adversaries an opportunity to create a security incident by exploiting vulnerabilities in our software, hardware & services. Threat Intelligence & Responsible Disclosure Program to proactively identify, assess and manage risk to emerging and future threats

Implemented Solutions/Threat Detection packages for ArcSight customers to detect, investigate and monitor sophisticated threats using HPE ArcSight SIEM following defense in depth approach. Example: Entity Monitoring, Ransomware Detection, VPN Monitoring, Threat Intelligence etc.: https://marketplace.microfocus.com/arcsight Implemented solutions to demonstrate adherence to HIPAA & PCI compliance for ArcSight customers. Worked with ArcSight customers to demonstrate the capabilities of the ArcSight SIEM/Logger, implemented new detectors specific to customer’s environment and fine-tuned their existing detectors.

Investigated and responded to the security incidents across the Target organization in a 24/7 environment, Managed SIEM Threat Detection Signals, performed Threat & Vulnerability Management using CVSS Standard & Prevented DLP Loss (static/dynamic). Assisted Tier I Analysts in monitoring network traffic and security alerts for potential events/incidents as well as trending and historical analysis and ensuring all incident reports are complete and written within standard operations, ensure ticket audits and reviews are completed.