Sneha Shasidharan

For Automotive Cyber Security experts !!

1

Good Opportunity

1

Another small write up on the evolving Cyber Threats and Growing Security Opportunities in BFSI sector. From the recent learnings and evolving threats, the entire globe is getting triggered by various cyber crimes/ data breaches and facing high challenges in protecting their Data. Based on the increasing uncertainties, It's always important to understand the current threat landscape, analyse and adapt to the growing technologies by enabling the right set of security controls to be resilient in nature. Have shared some of my views here in this article. Thank you INDUSTRY 4.0 and the entire team for publishing this article Today! #Evolvingthreats #growingsecurityopportunities #emergingtrends #needforsecurity #beingresilient #securitymatters #continouslearning

34

5 Comments

Keynote address by Narendra Nath Gangavarapu, Joint Secretary, National Security Council Secretariat, Government of India at the 2nd Edition of the ObserveNow Digital Bharat Cybersecurity Summit & Awards 2024. #ObserveNowCybersecurity #ObservenowMedia #Cybersecurity #DigitalBharat #GenAI #policymakers #industryleaders #DataProtection #ObserveNowGovernance #AI #ArtificialIntelligence #Security #Summit #NewDelhi

13

1 Comment

Hello Job Seeker, I am SOC Manager at Wipro and searching for "Threat Hunting and Threat Intelligence Lead" with +6 Year of experience and acceptable notice period is up to 30 days. If your skills and experience are matches with below given Job Description, please ping me to schedule a further round of interviews. Role = Threat Hunting and Threat Intelligence Lead Job Description Performs intelligence-driven network defense supporting the monitoring and incident response capabilities. The role involves analysis of large amounts of data from vendors and internal sources, including various indicator feeds, Splunk, and several threat hunting tools, etc. Threat Hunters perform the functions of threat operations and hunting and serve as the liaison for Threat Intelligence in the Security Operations Center, and mentor the incident handling, incident response, and forensics teams. Search for cyber threats and risks hiding inside the data before attacks occur. Gather as much information on threat behavior, goals, and methods as possible. Organize and analyze the collected data to determine trends in the security environment of the organization. Make predictions for the future and eliminate the current vulnerabilities. Monitoring and analyzing external and internal cyber threats to assess risk. Analyzing the likelihood that an emerging threat will impact their organization and identify where weaknesses are. Delivering reports and recommendations to the business to enable the effectiveness of mitigation and remediation efforts. Providing requirements to influence threat mitigation strategies. Analyzing internal risk and security controls to identify existing security weaknesses. Consolidating cyber threat intelligence feeds and sources. Providing threat intelligence support to cybersecurity teams during security incidents. Create process documents and SOPs for Threat Hunting Finalizing the Threat hunting scenarios and hypothesis Proactive threat hunting leveraging all platforms Creating IoC databases for threat hunting Submit detailed reports on a monthly basis to all relevant stake holders Up to date and good knowledge of all latest and prevalent threats for conducting threat hunts SME for presenting threat hunt scenarios to customer Providing logs as required by CSIRT and Forensic services   Experience – +6 Year of experience , Certification in threat hunting & forensic , VA/PT , Splunk , EDR and other Security tool awareness , understanding of Unix , windows and application structure

55

9 Comments

 💡#Didyouknow that the CIS Controls are a prioritized set of 20 best practices that can significantly reduce the likelihood of a successful cyberattack. Deep Chanda Salil Sankaran Saikat Das (Sam) Prajwal Gowda Nikhil Raj Singh Jaideep Patil #ampcuscyber #didyouknowfacts #cybersecuritytraining #securitytraining #phishingattacks #vulnerabilities #cyberattack #security #cybercrimes #dataprotection #dataprivacy #cybersecurity #complaince #cyberdefense #cybersecurityawareness #didyouknow

16

🚀 NIST CSF 2.0 2024 Update: A Game Changer for India’s Cybersecurity Landscape 🌐 The 2024 update to the NIST Cybersecurity Framework (CSF) 2.0 brings a significant shift in how we approach cyber security globally, and it's set to offer massive benefits for India as well. ✳️ Enhanced Risk Management: In keeping with India's expanding digital economy and diverse business ecosystem, the new version incorporates more robust and scalable risk management procedures. Indian businesses don't have to be overwhelmed by complexity in order to improve their cybersecurity posture by taking a flexible strategy. ⛓️ Focus on Supply Chain Security: India is a key global centre for IT services and outsourcing, and as such, it depends a lot on safe supply chains. The new supply chain risk management principles in NIST CSF 2.0 enable Indian organisations to protect their whole operation. 👨‍🎓 Alignment with International Standards: The upgrade emphasises adherence to international cybersecurity principles and international engagement more than before. This provides a means of proving compliance with international cybersecurity requirements for Indian companies hoping to grow internationally or cater to clients outside. 📈 Enhanced Cyber Resilience: New cyber resilience methods are included in NIST CSF 2.0, which is important for India's vital industries including banking, healthcare, and energy. Increasing resilience guarantees fewer downtime and a quicker recovery from attacks. 🤑 Support for Digital Transformation: By providing guidance on safeguarding cloud, IoT, and AI-driven infrastructures, this update enables secure digital transformation as India moves closer to being a $5 trillion digital economy. #Cybersecurity #NISTCSF #DigitalIndia #CyberResilience #RiskManagement #SupplyChain #DigitalTransformation ECS Ankusshh Sethi Bhagyesh Takoliya Heetav Rathod Abrar Badarpura NAITIK SHUKLA Parth Shah Mithun Chakravarty Priyanka Chauhan Priyanshi Patel

23

1 Comment

Cybersecurity 101: CNAPP - A Primer I got an opportunity to present CNAPP Primer to Security Operations - SIG created by ISACA Chennai Chapter(Official) this year. Though small group it was engaging audience with good discussion. Thanks for the opportunity Sangeetha N. Sathish, Kannan Subbiah, Vaidyanathan Chandramouli & Sundaravenkataraman Sundararaman Here's the presented slide-deck. Any thoughts? Feel free to add-in comments #cybersecurity101 #secops #isaca #isacachennai #sig #cnapp

64

4 Comments

Comprehensive Vulnerability and Risk Management for Total Security Kunal Bajaj Sachin Kumar Kaustubh Aradhye Gopesh Mehrotra Sachin Bahl Ashima Kataria Saurabh Seth Mohit Mittal PMP® Deep Shankar Yadav Vaibhav Sakhare CFE, ACE, EnCE Rajesh Kumar NxSAM - Security Audit and Management #vulnerabilitymanagement #cybersecurity #auditlifecycle #risk #nxsam #esecforte

48

DNSFilter: Securing Your #DigitalWorld, Seamlessly Authors- Manoj Joshi and Shivi Gupta (Scholar, Indian Institute of Information Technology Lucknow)   The #BigQuestion: Is DNSFilter strategically prioritising #research and development efforts for enhancing its #DNS-based threat protection solutions, particularly in addressing evolving #cybersecurity challenges? DNSFilter creates threat prevention and filtering systems that operate in the cloud. Via its platform, users can block harmful website content and guarantee crucial visibility for #informationtechnology (IT) teams. Other solutions include protection against botnet attacks, malware, phishing, and viruses, as well as domain analysis powered by artificial intelligence. The CEO of DNSFILTER, Ken Carnesi, founded the company in reaction to issues he was having with threat protection and DNS filtering services that were already in place, especially #OpenDNS. As the creator of Anaptyx, a business that offers internet services to the public and private sectors, Carnesi ran into problems with content filtering, bandwidth, and threat management. Carnesi recognised there was a need in the market for a more affordable and transparent solution when the supplier he was depending on, OpenDNS, enforced arbitrary pricing increases and required a great deal of information for pricing discussions. Dissatisfied with the available options, such as #SafeDNS, the tech #entrepreneur saw a chance to use his experience and technological know-how to create DNSFilter. The business wants to use DNS to transform people's perceptions about security. They support a multi-layered #cybersecurity strategy because they recognise how remote the world is becoming #VUCA Challenges #Volatility: The cybersecurity landscape constantly changes, requiring DNSFilter to adapt quickly to new threats. #Uncertainty: Predicting future cyber threats is difficult, making long-term planning challenging. #Complexity: The ever-increasing sophistication of cyberattacks requires continuous improvement of DNSFilter’s detection methods. #Ambiguity: Differentiating between legitimate and malicious traffic can be complex, requiring ongoing refinement of filtering algorithms.   #Lessons DNSFilter provides useful insights for companies operating in the #cybersecurity space. Its success highlights the strategic benefit of cybersecurity specialisation and is based on a targeted approach to DNS-based threat protection. The freemium business model adopted by DNSFilter emphasises how crucial user-centric marketing techniques are for drawing in new clients and keeping existing ones. Long-term connections are fostered by increasing stakeholder confidence through transparency in pricing and partnerships. Singapore Management University MIT Sloan Management Review Indian Institute of Technology, Kanpur Indian Institute of Technology, Bombay Indian Institute of Technology, Madras IIM Bangalore EPGP (One Year Full-Time MBA Programme)

36

Specialist - Information Security 7 - 10 Years 1 opening Bengaluru Job Description Responsibilities: 1. A senior SOC analyst would work closely with the SOC team and be responsible for incident detection, triage, analysis, and response. 2. Hands-on experience with configurations and management of SIEM tools (Qradar (preferred), Azure Sentinel, and Splunk), including log source integrations, custom parsers built, fine tuning and optimizing the correlation rules, and use cases Is MUST. 3. Proven experience with any of the security information and event management (SIEM) tools like Azure Sentinel (preferred), Qradar, Splunk, etc. 4. Having good experience working with an EDR solution like MS Defender 5. Determine quick defense techniques until a permanent solution is found. 6. Experience in building automation playbooks using any of the SOAR tools like IBM Resilient (Preferred), ServiceNow SecOps, Demisto (XSOAR), and LogicApps 7. Experience in writing automation scripts using Python, KQL, and PowerShell 8. Recognize successful intrusions and compromises by reviewing and analyzing relevant event detail data. 9. Review incidents escalated by Level 1 analysts. 10. Launch and track investigations to resolution. Recognize attacks based on their signatures, which differentiates false positives from true intrusion attempts. 11. actively investigates the latest in security vulnerabilities, advisories, incidents, and 12. penetration techniques and notifies end users when appropriate. 13. Identify the gaps in the security environment and suggest the gap's closure. 14. Change Management must be driven and supported. 15. performs and reviews tasks as identified in a daily task list. 16. Report Generation and Trend Analysis Starting the governance meeting with the customer and walking the customer and stakeholders through the security status from the SOC's perspective. 17. It is advantageous to have prior experience managing SIEM solutions on public and private clouds such as Amazon Web Services (AWS), Microsoft Azure, and others. 18. willing to work in a 24-hour, seven-day-a-week rotational shift model, including night shift KRA: 1. 3 to 5 years experience 2. Identify and investigate the security incidents. 3. Identify security gaps and use Change Management to close them. 4. Monitor the security logs and s from various devices and escalate or investigate the incident. 5. To explore different security technologies available in the market. 6. Install, build, test, and configure SIEM-related systems. 7. Maintain security dashboards. 8. Coordination with internal customers for their security-related problems and providing solutions 9. Documentation of security solutions 10. Handle L2 and above-level technical escalations from the operations team and resolve within the SLA. 11. Work closely with L1 team members to provide quick support and escalate issues. 12. Train other analysts in their role and responsibilities SOC - Operations [email protected]

2

Modern Cybersecurity: Lessons from the Ramayana 1. *Lakshmana Rekha as Firewall*: Just as Lakshmana draws a protective circle around Sita to keep her safe from harm, a firewall in cybersecurity serves to guard data by filtering incoming and outgoing network traffic based on security rules. 2. *Ravana's Disguise as Phishing*: In the tale, Ravana deceives Sita by masquerading as a sage, similar to phishing attacks where cyber criminals disguise malicious links or emails as trustworthy, in order to steal sensitive information. 3. *Hanuman's Search for Sita as Data Recovery and Incident Response*: Hanuman's mission to find Sita reflects the critical roles of data recovery and incident response teams who work to retrieve and restore compromised data, while mitigating the damage from security breaches. 4. *Vibhishana as Insider Threat Protection*: Vibhishana switching sides to help Rama mirrors the need in cybersecurity to manage and mitigate risks from insiders who may have access to sensitive information and the potential to misuse it. 5. *Building the Bridge to Lanka as Secure Access*: The bridge to Lanka symbolizes secure access in cybersecurity, ensuring that only authenticated and authorized users can reach sensitive network resources. 6. *The Golden Deer as Social Engineering*: The golden deer that captivates Sita's attention can be likened to social engineering tactics where cyber attackers use attractive offers to lure individuals into traps, leading to potential security breaches. 7. *The Burning of Lanka as Network Penetration Testing*: Just as Hanuman sets fire to Lanka to create chaos and test its defenses, penetration testing in cybersecurity involves deliberate attacks on a system to identify vulnerabilities and ensure that defenses are effective. 8. *Jatayu’s Intervention as Intrusion Prevention System (IPS)*: Jatayu's attempt to stop Ravana from kidnapping Sita acts like an Intrusion Prevention System (IPS), which actively monitors for malicious activities and attempts to stop attacks in progress. 9. *The Vanara Army as Distributed Denial of Service (DDoS) Mitigation*: Just as Rama’s vast army of Vanaras helps him recover Sita, DDoS mitigation involves mobilizing multiple resources to diffuse traffic and protect target systems from being overwhelmed by attacks. 10. *Agastya’s Blessing as Encryption*: The blessing given to Rama by the sage Agastya, which empowers him to defeat his enemies, is similar to encryption in cybersecurity. Encryption acts as a powerful tool that encodes data, making it inaccessible to unauthorized users and thus protecting sensitive information.

48

🔍 Unveiling NIST CSF v2.0 Audit Checklist - Part 5: Respond (RS) & Recover (RC) 🔍 Before you scroll down Follow Niranjan V for more such Infosec Content. Reach out for ISO 27001 Mentorship, Training, and Guidance, & join our exclusive infosec group for early access to creative infosec content PS: Infosec Community Link shared in Comments Section 1️⃣ Introduction to the Document: Delve into the final stages of the NIST CSF v2.0 framework with our latest checklist, focused on the crucial Respond (RS) and Recover (RC) functions. 2️⃣ What's in the Document: This part of the checklist offers detailed guidance on how to effectively manage and recover from cybersecurity incidents. It includes actionable steps, best practices, and key metrics to ensure your organization’s swift response and recovery. 3️⃣ Conclusion: Enhance your audit preparedness and resilience with this comprehensive guide. Download now to ensure your organization is ready to respond and recover from any security challenge. #NIST #NISTCSF #Respond #Recover #audit #checklist #infosec #cybersecurity #Governance #Risk #Compliance #incident #management #SOC #Disaster #recovery #Guidance #document #free

255

21 Comments

SEBI's initiative to establish a #SecurityOperationCenter (#SOC) for regulated entities is crucial in this evolving sophisticated cyberthreats and risks. This aligns with #Cybersecurity and Cyber Resilience Framework(#CSCRF). Here's how we bring your mission to life: 👉 We help you in tailored SOC design that suit ur specific business requirements. 👉 We bring right technology, processes and implement it. 👉 Our SOC provide #24/7monitoring to ensure swift detection and response to security incidents 👉 Our experts provide an #incidentresponse plan to swiftly manage and mitigate incidents. Need help? Let's discuss to build and manage tailored SOC for your business. #SEBI #compliance Read more: https://lnkd.in/gFk2jwuQ

11

Large companies will have 'security & privacy' as key focus area, with the relevant resource, including the budget, allocation across levels - right from having a designated CISO, DPO and likewise, whereas it shall be an add-on at most of the SMEs. The required depth of expertise and ownership shall be deliberately missing until something amiss. The IT support personnel shall be playing the security admin role too. The priority is to define security accountability at all levels, as with the required training & awareness too. Culturally too, security should be made a business priority in driving adherence to the laid out measures, any time.

2

𝗣𝗿𝗼𝘁𝗲𝗰𝘁 𝘆𝗼𝘂𝗿 𝗻𝗲𝘁𝘄𝗼𝗿𝗸 𝘄𝗶𝘁𝗵 𝘁𝗵𝗲 𝗿𝗶𝗴𝗵𝘁 𝗳𝗶𝗿𝗲𝘄𝗮𝗹𝗹! From Next-Generation Firewalls to Cloud-Based solutions, these 5 types offer robust cybersecurity to defend against modern threats. Ensure your organization is secure and ready for anything. Naveen Belgode Utkarsh Bhargava Shivani R Sankalp B Garuthman Naveena M Reshma Pereira CySecK Data Security Council of India #cybersecurity #cso #iso #cxo #cto #ciso #firewall #ngfw #cloudsecurity #dataprotection #infosec #networksecurity #malware #threatprevention #cybersafety #endpointsecurity #technews #datasecurity #secureyourdata #securitytips

12

Sattrix Information Security files draft papers with BSE SME for IPO, targets listing by mid-May | Mint - Mint: Sattrix Information Security files draft papers with BSE SME for IPO, targets listing by mid-May | Mint  Mint #CyberSecurity #InfoSec #SecurityInsights

1