Allwin Marshal, CISM

Operations Associate

Bengaluru, Karnataka, India13 yrs 6 mos experience

Most Likely To SwitchHighly Stable

Key Highlights

Expert in Security Information and Event Management (SIEM).
Proficient in incident management and device management.
Strong background in cybersecurity tools and methodologies.

Stackforce AI infers this person is a Cybersecurity professional with extensive experience in SIEM and incident management.

Contact

allwin1990@gmail.com LinkedIn

Skills

Other Skills

CCisco TechnologiesCustomer ServiceDatabasesHTMLIDSITIL v3 Foundations CertifiedInformation Security ManagementJavaMalware AnalysisManagementMicrosoft ExcelMicrosoft OfficeMicrosoft WordNetwork Security

About

Motivated Information Security professional, experienced in the area of Security Information and Event Management(SIEM) Administration and Incident Management. I am well versed and interested in SIEM implementation/Administration, Device Management, Parser creation and Content development.

Experience

13 yrs 6 mos

Total Experience

4 yrs 6 mos

Average Tenure

6 yrs 8 mos

Current Experience

Ab inbev

3 roles

Manager | Brand Protection| Cyber operations

Jul 2024 – Present · 1 yr 11 mos

Senior Specialist/(Manager) - SIEM

Apr 2021 – Jul 2024 · 3 yrs 3 mos

SIEM Specialist

Oct 2019 – Apr 2021 · 1 yr 6 mos

Leading Sumologic SIEM Platform

Happiest minds technologies

Technical Lead

Jan 2015 – Oct 2019 · 4 yrs 9 mos · Bengaluru, Karnataka, India

Managing SIEM tool( McAfee nitro and SumoLogic )

Wipro

Project Engineer

Nov 2012 – Dec 2014 · 2 yrs 1 mo · Mumbai Area, India

Professional Experience
Since Jan’ 15: Happiestminds technologies, Bangalore as Information Security Analyst
Project: Information Security Monitoring (McAfee Nitro ESM)
My roles and responsibilities
 Part of a Secmon team of 15 members, for Reliance Communication Ltd.
 Supporting the establishment, enhancement, and continual improvement of an integrated set of alerts, searches, reports, and responses.
 Analysing event flow of various devices using reports, dashboards, query viewers, event viewers etc.
 Provide day-to-day support to Incident Response/Management.
 Administration and troubleshooting related to McAfee ESM tool and end devices.
From Nov’ 12 to Dec’14: Wipro technologies, Bangalore as Information Security Analyst
Support: Wipro Global Security Operations Centre
Project: Information Security Monitoring (RSA Envision, RSA SA& Cisco Splunk)
My roles and responsibilities
 Part of a Secmon team of 20 members, for a US based finance Institution.
 Detect and respond to IT security incidents using RSA Envision, RSA SA, FireEye, McAfee NSM, Imperva secure sphere, Cisco iron port proxy, McAfee ePO
 Provide day-to-day support to Incident Response/Management.
 Supporting the establishment, enhancement, and continual improvement of an integrated set of alerts, searches, reports, and responses.
 Analysing event flow of various devices using reports, dashboards, query viewers, event viewers etc.
 Malware analysis using malware detector tool Fire eye.
 DDoS Alert Analysis and Mitigation using Arbor consoles ( AT&T & Verizon).
 Analysing intrusion events using IDS Consoles McAfee NSM.
 Database event monitoring using Imperva Secure sphere
 File Integrity Monitoring using McAfee EPO(Solidcore).

 Creating Daily, Weekly and Monthly status reports and trend reports for various devices.
 Leading and coordinating weekly meeting with client and discuss about issues, challenges, escalations, process changes etc.