Headline

Cybersecurity Specialist | SOC Operations | Threat Intelligence | Incident Response | SIEM (Splunk, Sentinel, JSA) | EASM | Cloud Security (Azure, AWS) | GRC | Pen Testing | Python Automation

About

Cybersecurity Specialist with over 7years of experience in SOC operations, threat intelligence, and incident response across finance, media, and tech industries. Proven expertise in cyber incident management, SIEM operations (Splunk, Sentinel, QRadar), and enterprise vulnerability management. I’ve led proactive threat hunting, implemented MISP for threat sharing, and engineered security improvements across multi-cloud environments. My experience spans advanced penetration testing, firewall security, EASM, and forensic analysis using industry-leading tools and frameworks (NIST, ISO 27001, MITRE ATT&CK). I thrive in fast-paced environments, collaborate cross-functionally, and bring a security-first mindset to everything I do. Currently focused on optimizing threat detection and response at scale using automation and intelligence-driven solutions.

Location

Albany

Work experience

Cyber Security Specialist at Vanguard, Jan 2025 - Present · 1 yr 6 mos, United States, Identify, analyse, and mitigate security threats as a core member of the Global Cybersecurity Incident Response Team (CIRT), protecting over 18,000 employees and 30,000 devices by ensuring timely containment, thorough investigation, and effective remediation. Work closely with cross-functional teams to ensure effective communication of cybersecurity goals and threat mitigation strategies. Lead vulnerability management and spearhead threat hunting efforts by building and managing a comprehensive threat hunting program, take ownership of creating tailored queries and leveraging external resources to detect otherwise unnoticed threats. Continuously improving incident response workflows and vulnerability management processes, leading to faster identification and resolution of threats.

SOC Analyst at Paramount, Jan 2024 - Dec 2024 · 1 yr, United States, Provided service to in-house and consulting to various customers for SOC / MDR-related projects Onboarded various in-house projects into Splunk and Sentinel SIEM platform for SOC monitoring 24/7. Configured and managed security tools, including Microsoft Defender, Azure AD Identity Protection, and custom Sentinel playbooks, to enhance detection and response capabilities. Conducted weekly SOC incident status meetings, ensuring effective communication and resolution planning with stakeholders. Identified, escalated, and remediated compliance violations, misconfigurations, and vulnerabilities in collaboration with multi-stakeholder teams. Integrated multi-cloud SOC monitoring to SIEM via various data connectors

Security Engineer at Juniper Networks, Mar 2020 - Jun 2023 · 3 yrs 4 mos, India, Acted as the final escalation point within TAC, resolving complex technical issues through in-depth analysis and lab replication before involving engineering or development teams. Led complex troubleshooting sessions, resolving critical issues related to Junos Space and JSA, ensuring minimal downtime for clients. Conducted in-depth RCA and collaborated closely with Juniper’s engineering teams to resolve complex issues, delivering detailed reports, actionable recommendations, and ensuring timely solutions within SLA timelines. Managed and optimized EPS (events per second) and FPM (flows per minute) within JSA, aligning system performance with client-specific licensing agreements. Implemented scripts in Python for network automation and tasks like discovering devices, resyncing the configuration after an update, and clearing devices from the MySQL table.

Security Engineer at Kratikal, Jun 2017 - Feb 2020 · 2 yrs 9 mos, India, Conducted an internal penetration test for an educational institution using Nessus and utilized the MITREATT&CK framework to prepare a detailed report of my findings. Implemented Network security checks against DOS attacks and port scans to ensure the proper functioning of the Network firewall. Performed a security assessment of the web application to test it for OWASP TOP 10 and provided possible security measures to patch the existing vulnerabilities, thus reducing the threat factor by 38%. Worked on System and Kernel exploitation using ExploitDB and Rapid7 database to achieve root-level remote code execution. Tested the Network firewall against several bypass attacks like IP fragmentation, MAC address spoofing, and source routing to find possible loopholes and harden the security aspect of the network firewall.

Education

Master of Science - MS, Digital Forensics and Cybersecurity, University at Albany

B.tech/B.E, Electrical and Electronics Engineering, Delhi Technological University (Formerly DCE)