Headline

Cyber Security Specialist @ Tata Consultancy Services | Incident Management, Threat Intelligence

About

Cybersecurity professional with 3+ years of experience in SOC operations, continuous security monitoring, and incident response (L2) within enterprise environments. Skilled in alert triage, incident detection, and escalation management using SIEM and EDR platforms. Strong expertise in threat hunting, malware analysis, and MITRE ATT&CK–aligned investigations, with hands-on experience analyzing network traffic (TCP/IP, DNS, HTTP) and endpoint telemetry. Strong exposure to diverse security tools and enterprise environments, with experience supporting complex SOC operations in competitive, high-performance settings. Proven ability to support 24×7 SOC operations, maintain SLA compliance, and improve detection accuracy through tuning and automation. Committed to strengthening cyber resilience and delivering high-quality security operations in fast-paced environments.

Location

Kolkata

Work experience

Cyber Security Specialist at Tata Consultancy Services, Mar 2025 - Present · 1 yr 3 mos, Act as the primary liaison between the SOC team and senior management (CISO), other IT departments, and external stakeholders, ensuring clear and timely communication, especially during incidents. Implement strategies to manage alert fatigue and high-stress environments to retain skilled talent. Develop, implement, and continually test the organization's Incident Response (IR) plan and standard operating procedures (SOPs) or playbooks for handling various types of security events. Oversee the triage and escalation process, stepping in to lead the coordinated response to high-severity incidents.

Security Operations L2 at Tata Consultancy Services, Jan 2025 - Present · 1 yr 5 mos, Oversee the integration and use of threat intelligence to proactively identify and prioritize potential risks, enhancing the organization's overall security posture. Establish and track key performance indicators (KPIs) and operational metrics (e.g., Mean Time to Detect (MTTD), Mean Time to Respond (MTTR)) to measure the SOC's effectiveness and report on performance to leadership. Ensure 24/7 monitoring of all network, system, and application logs/alerts for suspicious activity.

Cyber Security Analyst at Tata Consultancy Services, Jan 2024 - Present · 2 yrs 5 mos, Kolkata, West Bengal, India, Conduct core security operations including SIEM monitoring and incident response. • Perform threat analysis and apply Cyber Kill Chain methodology for proactive defense. • Prevent data exfiltration and mitigate insider threats through continuous monitoring. • Respond to malware, phishing, and DDoS attacks with precision and speed. • Utilize tools such as MS Defender, Sentinel One, Grey Matter, IronPort, and ServiceNow for threat detection and response. • Collaborate with SOC teams to document incidents, generate reports, and support remediation efforts. Key Skills  Cybersecurity Tools: Sailpoint IIQ, SentinelOne, ServiceNow, Sumologic, Postman API, SIEM, Singularity.  Incident Management: Incident detection, response, and recovery  Threat Intelligence: Malware analysis, threat hunting, ransomware defense  Identity & Access Management (IAM): Identity governance, Active Directory, MFA, SSO.  Protocols: TCP/IP, SSL, HTTPS, DNS, DHCP, HTTP/HTTPS  Security Monitoring: SOC operations, event management, real-time monitoring

Electrical Project Engineer at TOUJOURS PERITUS PVT LTD, Dec 2020 - Aug 2021 · 9 mos, Kolkata, West Bengal, India

Education

B.tech, Electrical Engineering Technologies/Technicians, University of Engineering & Management (UEM)

Higher Secondary Education, Computer Science, Sarada Vidyapith