Skip to content

Haveelah Joy Kommuri

Cybersecurity Analyst • Bangalore • h***********@gmail.com • +91*******072 • drivetube.ai/•••••

Professional Summary

Cybersecurity Analyst with 3.8 years of experience in endpoint security administration and SOC operations using Microsoft Defender, Microsoft Sentinel, and EDR platforms. Experienced in AV migration from Symantec to Windows Defender, building and tuning detection rules with MITRE ATT&CK mapping, performing forensic investigations and incident response, and managing endpoint policies with MECM and Intune to improve detection and remediation across enterprise environments.

Technical Skills

Tools and Methodologies: Incident response,Forensic investigation,Threat intelligence,ServiceNow,Change management,Problem management,BitLocker,EDR policy configuration,Endpoint policy design,Security monitoring
Endpoint Security: Microsoft Defender for Endpoint,Symantec Endpoint Protection,Endpoint Detection and Response,Windows Defender Antivirus,Symantec Protection Engine
SIEM and Detection: Microsoft Sentinel,Log analysis,Custom correlation rules,Detection engineering,MITRE ATT&CK
Endpoint Management and MDM: Microsoft Endpoint Configuration Manager,MS Intune,Workspace ONE,MDM administration
Identity and Monitoring: Microsoft Defender for Identity,Active Directory monitoring,MDI agent deployment
Network, Protocols and Firewalls: Windows Firewall,Group Policy,IDS,IPS,TCP,IP,HTTP,HTTPS,FTP

Work Experience

Tata Consultancy Services
Bangalore
Cybersecurity Analyst
06/2022 – Present
Worked at Tata Consultancy Services supporting enterprise clients on endpoint security, AV migration, and 24x7 SOC monitoring using Microsoft Defender, Microsoft Sentinel, and related endpoint management tools.
Tech Stack: Microsoft Defender for Endpoint, Microsoft Sentinel, Microsoft Defender for Identity, Microsoft Endpoint Configuration Manager, MS Intune, Workspace ONE, Symantec Endpoint Protection, ServiceNow, Windows Firewall, Group Policy, BitLocker, EDR
  • Led antivirus migration from Symantec to Windows Defender across client endpoints using Microsoft Endpoint Configuration Manager and MS Intune; created rollout plans and baseline policies to minimize user disruption during deployment.
  • Created and managed Windows Defender and EDR policies for Windows servers and client machines via MECM and Intune, enforcing threat protection configurations and centralized policy compliance.
  • Operated 24x7 SOC monitoring using Microsoft Sentinel and Microsoft Defender for Endpoint, performing alert triage, incident investigation, containment, and escalation while tracking incidents in ServiceNow.
  • Deployed Microsoft Defender for Identity agents on Active Directory and AD Certificate Services servers to monitor authentication activity and network telemetry for suspicious lateral movement.
  • Designed and implemented custom analytic and correlation rules in Microsoft Sentinel (KQL) to detect anomalies and indicators of compromise, mapping alerts to MITRE ATT&CK techniques to improve detection coverage.
  • Conducted log analysis and endpoint forensic investigations during security incidents, remediating malware infections, managing Windows Firewall via Group Policy, and executing incident/change/problem management workflows.

Education

Prakasam Engineering College
Bachelor of Engineering in Electronics and Communication Engineering • Prakasam, India • 2017 – 2021

Certifications

Certified Azure Developing Solutions AZ-204 — Microsoft
Google Cloud certification — Google

Powered by Drivetube · Create your own profile at drivetube.ai