Danish Mir profile photo 1 on Tal

Danish Mir

Cybersecurity | SIEM | Cloud Security | CrowdStrike EDR | XDR | Phishing & Malware Analysis | Automation AI | Python | Comptia Security+

New Delhi

4+ years of work experience

eSec Forte® Technologies
Jan 20251 yr 5 mosPresent

Delhi, India

Responsibilities & Achievements: Monitored and analyzed security alerts across various platforms using QRadar SIEM. Performed log analysis on firewall, proxy, WAF, and endpoint logs to detect anomalies and suspicious behaviors. Investigated and triaged phishing emails, extracting IOCs, analyzing headers, and correlating user activity. Used SentinelOne and Cortex XDR for endpoint detection, threat containment, and RCA. Conducted threat hunting activities based on MITRE ATT&CK framework and anomaly patterns. Implemented and tuned DLP policies, ensuring data protection across endpoints and cloud platforms. Analyzed IAM logs, AWS EC2 activity, and configured alerts for unauthorized access or misconfigurations. Triaged malware incidents using sandbox analysis and behavioral investigation. Created detailed incident reports, summaries, and recommendations for continuous improvement. Collaborated with cross-functional teams for remediation and improving overall security posture. Tools & Tech Used: QRadar | SentinelOne | Cortex XDR | AWS IAM & EC2 | Azure Defender | Proofpoint | Palo Alto | WAF | Proxy | MITRE ATT&CK | Elastic | DLP | Email Security | CrowdStrike
National Informatics Centre, MeitY
Oct 20222 yrs 4 mosJan 2025

India

· Led proactive network monitoring and security analysis to detect and respond to cybersecurity threats, safeguarding critical infrastructure. · Implemented SIEM configurations in Splunk optimizing event correlation and alerting to enhance incident response efficiency. · Developed and enforced network security policies and access controls, focusing on risk mitigation and compliance with security standards. · Conducted regular vulnerability assessments and threat intelligence integration, coordinating with cross-functional teams to strengthen network defenses
GitHub
@Heezaizme

Education

Diploma in Cyber Security, Cybersecurity

GoBeyondLearning

20242024
University of Kashmir

B.Tech, Electrionic and Communication Engineering

University of Kashmir

20221 yr2023

Join Danish and 10k+ other professionals on

Tal Boss

Tal is the app where bosses meet engineers & builders directly, without middlemen

Download Tal Boss

Danish Mir on Tal

Headline

Cybersecurity | SIEM | Cloud Security | CrowdStrike EDR | XDR | Phishing & Malware Analysis | Automation AI | Python | Comptia Security+

About

Cybersecurity professional with over few years of experience in Security Operations, currently working as a SOC Analyst with hands-on expertise in threat detection, DLP, XDR/EDR monitoring, Cortex XDR, log analysis, and structured incident response. I specialize in triaging alerts from a wide range of data sources including firewalls, email gateways, authentication logs and SIEM platforms like QRadar and Splunk. My responsibilities include phishing investigation, malware triage, alert enrichment, use case tuning, and collaboration with incident response teams. I work across both on-prem and hybrid environments, with growing expertise in cloud security (AWS & Azure).

Location

New Delhi

Work experience

Security Analyst at eSec Forte® Technologies, Jan 2025 - Present · 1 yr 5 mos, Delhi, India, Responsibilities & Achievements: Monitored and analyzed security alerts across various platforms using QRadar SIEM. Performed log analysis on firewall, proxy, WAF, and endpoint logs to detect anomalies and suspicious behaviors. Investigated and triaged phishing emails, extracting IOCs, analyzing headers, and correlating user activity. Used SentinelOne and Cortex XDR for endpoint detection, threat containment, and RCA. Conducted threat hunting activities based on MITRE ATT&CK framework and anomaly patterns. Implemented and tuned DLP policies, ensuring data protection across endpoints and cloud platforms. Analyzed IAM logs, AWS EC2 activity, and configured alerts for unauthorized access or misconfigurations. Triaged malware incidents using sandbox analysis and behavioral investigation. Created detailed incident reports, summaries, and recommendations for continuous improvement. Collaborated with cross-functional teams for remediation and improving overall security posture. Tools & Tech Used: QRadar | SentinelOne | Cortex XDR | AWS IAM & EC2 | Azure Defender | Proofpoint | Palo Alto | WAF | Proxy | MITRE ATT&CK | Elastic | DLP | Email Security | CrowdStrike

Network And Security at National Informatics Centre, MeitY, Oct 2022 - Jan 2025 · 2 yrs 4 mos, India, · Led proactive network monitoring and security analysis to detect and respond to cybersecurity threats, safeguarding critical infrastructure. · Implemented SIEM configurations in Splunk optimizing event correlation and alerting to enhance incident response efficiency. · Developed and enforced network security policies and access controls, focusing on risk mitigation and compliance with security standards. · Conducted regular vulnerability assessments and threat intelligence integration, coordinating with cross-functional teams to strengthen network defenses

Education

Diploma in Cyber Security, Cybersecurity, GoBeyondLearning

B.Tech, Electrionic and Communication Engineering, University of Kashmir

Public links

github: https://github.com/Heezaizme