Babita Rimal
InfoTrack AU
Melbourne
1
Certification
5
years of professional experience
Cybersecurity Specialist with 5+ years of experience in threat detection, incident investigation, and security operations. Certified Security Operations Analyst (SC-200) and Identity Administrator (SC-300) with expertise in Microsoft security platforms, endpoint protection, and access control. Proven ability to investigate 50+ monthly security incidents, identify phishing and malware threats, manage 500+ endpoints with enterprise security controls, and reduce security incident rates by 20% through proactive threat monitoring and awareness training.
Work History
SYSTEM SUPPORT ENGINEER / SECURITY OPERATIONS
4 Years 11 Months- Monitored and investigated 50+ monthly security incidents via Microsoft Defender for Endpoint, identifying threats with 95% accuracy and coordinating remediation actions.
- Investigated phishing and VIP impersonation attacks: analyzed suspicious emails, identified threat actors, blocked malicious senders, and released legitimate held messages while educating users on attack patterns.
- Performed malware and ransomware detection analysis: quarantined suspicious files, isolated compromised endpoints, and coordinated cleanup procedures with IT teams.
- Analyzed email security alerts from Mimecast: investigated spam, phishing, and malware-laden messages; maintained 99.5% threat blocking rate and prevented credential harvesting attacks.
- Managed Microsoft Defender for Endpoint: configured threat detection policies, triaged security alerts (Critical, High, Medium), investigated endpoint compromises, and escalated advanced threats.
- Deployed and managed CrowdStrike Falcon across 500+ organizational endpoints: established real-time threat detection, vulnerability tracking, and coordinated endpoint remediation.
- Investigated credential compromise incidents: detected suspicious login attempts, forced password resets, enabled MFA re-enrollment, and coordinated account lockdown procedures.
- Implemented Endpoint Privilege Management (EPM) for 50+ users: enforced least-privilege access, secured administrative elevation, and maintained audit trail compliance.
- Managed identity and access security: administered Azure AD and Entra ID, configured conditional access policies, managed MFA enforcement, and performed access reviews.
- Coordinated incident response activities: communicated with affected users, generated incident reports, documented lessons learned, and maintained security incident logs for compliance.
- Conducted security awareness and training: delivered phishing simulations and security training to 500+ staff, reducing click-through rates and incident rates by 20%.
- Performed threat intelligence analysis: researched emerging vulnerabilities, monitored CVE databases, assessed attack vectors, and provided threat briefings to IT leadership.
- Collaborated with IT teams on security remediation: coordinated patching of critical vulnerabilities, updated security controls, and validated remediation effectiveness.
- Maintained security compliance: ensured 100% compliance with security baselines, managed audit logging, and prepared documentation for external security assessments.
Education
Master of Engineering Professional
Bachelor - Electronics & Communication
Skills
Threat Detection & Incident Response
Microsoft Defender & CrowdStrike
Phishing & Malware Investigation
Email Security & Threat Prevention
Endpoint Security Management
Identity & Access Security
Certification
- Security Operations Analyst Associate (SC-200) – Microsoft
- Identity and Access Administrator Associate (SC-300) – Microsoft
- Microsoft 365 Administrator Expert (MS-102)
- Microsoft 365 Administrator (MS-100)
Timeline
SYSTEM SUPPORT ENGINEER / SECURITY OPERATIONS
InfoTrack AU
08.2021 - CurrentRead More
Pokhara University
Bachelor from Electronics & Communication
Read More
Deakin University
Master of Engineering Professional
Read More