Looking for a job

kamlesh tiwari

@kamleshtiwari

EDR Senior Specialist at HCL Technologies supporting CrowdStrike Falcon across 104K endpoints and responding to endpoint security incidents.

India

Message

At HCL Technologies, I support endpoint security operations for Tenet Healthcare using CrowdStrike Falcon across approximately 104K endpoints. I monitor and investigate endpoint alerts, respond to potential threats, and handle Priority 1 and Priority 2 incidents.

I coordinate remediation with SOC and Incident Response teams, support malware incidents through ServiceNow, and manage endpoint anti-malware policies. I also assess endpoint risk and document incidents and resolutions for operational reporting.

Previously at HCL Technologies, I supported endpoint security operations for BMS Healthcare using Cylance and related security technologies across approximately 35K devices. Earlier, I worked on access management for ExxonMobil Corporation, provisioning and revoking Windows Server access, and provided desktop support at Religare Technologies / Tech Mahindra.

Experience

Work history, roles, and key accomplishments

Current

EDR Senior Specialist

Current

HCL Technologies

Jan 2021 - Present (5 years 10 months)

Manage endpoint security operations using CrowdStrike Falcon across approximately 104K endpoints. Handle P1/P2 incidents, coordinate with SOC/IR teams, and support anti-malware policies.

CrowdStrike Falcon Cloud Security Endpoint Security Incident Response Malware Analysis ServiceNow Threat Detection Security Operations Risk Assessment

EDR Analyst

HCL Technologies

Aug 2018 - Jan 2021 (2 years 5 months)

Supported endpoint security operations using Cylance and related technologies across approximately 35K devices. Coordinated with vendors and escalated security alerts to SOC/IR teams.

Cylance

Cybereason

Endpoint Security Security Monitoring Incident Response ServiceNow Security Reporting

IAM Specialist

HCL Technologies

Dec 2015 - Apr 2018 (2 years 4 months)

Managed access provisioning and revocation for Windows Server environments. Coordinated with clients and resolved access-related issues, including participation in SWAT calls.

IAM Windows Server Active Directory Access Control Incident Management