Headline

Cybersecurity Analyst at OculusIT

Location

Gurugram

Work experience

Monitoring Lead at OculusIT, Feb 2023 - Present · 3 yrs 5 mos, Led end-to-end SOC monitoring operations across multiple client environments, ensuring effective threat detection, triage, incident response, and resolution. Supervised and mentored SOC analysts, providing technical guidance, performance oversight, and fostering a culture of continuous improvement and operational excellence. Oversaw real-time threat monitoring using EDR and SIEM tools, including CrowdStrike, Microsoft Defender, SentinelOne, Sophos, Carbon Black, Cybereason, Malwarebytes, FortiEDR, Tangent, Cylance, and Tenable Nessus 10.9.2, ensuring timely detection and mitigation of security incidents. Coordinated full-cycle incident response activities, including root cause analysis, containment, and recovery, with emphasis on rapid resolution of high-priority alerts. Reviewed and optimized SOC workflows, detection use cases, and alerting mechanisms to reduce false positives and improve detection accuracy. Collaborated with Threat Intelligence, IT, and Infrastructure teams to enforce security best practices and align incident handling with business continuity goals. Strengthened SOC capabilities through the development of advanced rule sets and playbooks aligned with the MITRE ATT&CK framework. Promoted knowledge sharing and operational consistency through regular training sessions, structured shift handovers, and collaborative threat-hunting initiatives. Contributed hands-on to complex investigations, threat hunts, and fine-tuning of security tools for improved performance. Achieved promotion from SOC Analyst to Team Lead within seven months, driven by exceptional technical expertise and leadership. Reduced incident triage time by 70% through optimized alert logic and targeted analyst mentorship.

Cyber Security Analyst at OculusIT, Feb 2023 - Present · 3 yrs 5 mos, Gurugram, Haryana, India

Network Security Engineer at Tanla Platforms Limited, Jul 2021 - Jan 2023 · 1 yr 7 mos, Hyderabad, Telangana, India, Monitored IT and security infrastructure to ensure high availability, threat visibility, and minimal downtime across environments. Utilized Grafana, SolarWinds, and Nagios XI for continuous system health and performance monitoring, and anomaly detection. Conducted daily threat analysis, log reviews, and incident handling using Wazuh SIEM, Splunk, and ELK Stack. Managed alert pipelines with RabbitMQ and enabled secure remote access to Linux-based systems using Termius. Performed security-focused system administration and automation through Linux shell scripting, SQL, and threat data correlation. Collaborated with cross-functional teams to implement incident response best practices, reducing MTTR and improving SOC operational efficiency. Investigated and responded to security alerts using EDR tools such as CrowdStrike, Microsoft Defender, and SentinelOne.

volunteering at GTU Innovation and Startup Centre GISC, Aug 2020 - Aug 2021 · 1 yr 1 mo, silvassa

Software Engineer Intern at Veniso Solutions, Jan 2021 - Jun 2021 · 6 mos, Hyderabad, Telangana, India, Integrated backend services with telecom infrastructure to support critical business systems. Built and optimized SQL database connections using phpMyAdmin for improved performance. Developed backend functionalities in PHP and enhanced user interfaces using jQuery. Utilized Linux command line for automation, system administration, and troubleshooting tasks. Delivered backend solutions that improved telecom system performance and reliability.

Education

Computer science and engineering, Gujarat Technological University (GTU)

Bachelor of Engineering, Computer Science, Laxmi institute of technology