Jun 2022 – May 2025 · 2 yrs 11 mos · Bengaluru, Karnataka, India · Remote

• Spearheaded the evaluation, selection, POC, and successful implementation of SIEM and SOAR solutions.
• Developed and deployed custom dashboards, correlation rules, and detection logic within log analysis platforms.
• Key player in establishing an Insider Threat Management Program, ensuring proactive identification and mitigation of insider threats.
• Leveraged threat intelligence and security research to enhance detection capabilities and stay ahead of emerging threats.
• Contributed to the development of an Incident Response Program, including drafting documentation and providing team training.
• Conducted log analysis and forensics investigations to identify security incidents and recommend mitigation actions.
• Executed hypothesis-driven threat hunting scenarios based on known tactics, techniques, and procedures.
• Developed comprehensive alert management knowledge base articles for alert triage, investigation, response, and mitigation.
• Implemented solution for brand reputation monitoring and for email security to enhance cyber defenses.
• Led POV and implemented DLP Solution to safeguard sensitive data assets and strengthen insider threat management.
• Established a process to stay informed about the latest security threats using threat intelligence feeds and open-source intelligence.

Feb 2019 – May 2022 · 3 yrs 3 mos · Mumbai, Maharashtra, India · Hybrid

• Coordinating in building Infrastructure Security Program for NIUM from Scratch
• Implemented various COTS such as Endpoint Security/Email Security/SIEM/Web Proxy for IT Security
• End to End Triage/Investigation/Response to Alerts/Anomalies
• Evaluated and Implemented SIEM Solution
• Implemented an Incident Response Program for the organization
• Integrated and maintained WAF to Client Facing Web Application
• Managed a Vulnerability Management Program End to End

Aug 2018 – Jan 2019 · 5 mos · Bangalore · On-site

• • Administration, monitoring, investigating, and alerting Security Events / Incidents to the next level analyst using ELK Stack.