About
IT Security Professional with around 3 years of experience in Security Operations Center (SOC) monitoring and enterprise IT security engineering. Skilled in Splunk SIEM, security event monitoring, log analysis, and incident triage, with exposure to Microsoft Defender EDR. Currently supporting IT security implementations including DNIF SIEM log integration, ThreatConnect SOAR deployment support, and infrastructure security. Strong understanding of SOC operations, incident response, and enterprise IT environments.
Skills & Expertise (41)
Work Experience
Security Associate
Tata Consultancy Services
Jan 2023 - Jan 2025
Performed 24×7 Security Operations Center (SOC) monitoring using Splunk SIEM to detect security incidents, intrusion attempts, and threats. Conducted alert investigation, incident triage, and incident response, creating and managing tickets in ServiceNow for timely resolution. Supported threat analysis, security monitoring, and SOC operations, ensuring continuous protection of enterprise environments. Escalated advanced incidents to Tie-2 and Tier-3 teams with detailed case documentation and root cause findings. Demonstrated working knowledge of IT infrastructure (networks, servers, systems, and databases) to support effective incident handling. Gained exposure to Microsoft Defender EDR during alert investigation and endpoint security activities. Worked with multiple security technologies including Cloud security, Email and Web security, Antivirus, IDS/IPS, DLP, Firewalls, Web proxies, and Vulnerability management tools. Prepared incident reports, compliance documentation, and client-specific security deliverables.
Security Engineer
Hitachi Systems India Pvt. Ltd.
Apr 2025 - Present
Supported DNIF SIEM log management by integrating database servers, validating log ingestion, and assisting with basic troubleshooting in coordination with clients and the DNIF support team. Provided L1 support and shadowed L2 engineers during ThreatConnect SOAR deployments, gaining practical understanding of SOAR workflows, incident response processes, and BFSI client environments. Worked in internal lab environments to build hands-on understanding of real-world IT infrastructure, including virtual machine creation, IP assignment, Active Directory and DNS configuration, basic firewall policy setup, and installation of security tools on server VMs. Performed basic Windows and Linux VM troubleshooting, server baseline configurations, user creation in on-prem Active Directory and Azure AD, and supported testing of enterprise security scenarios. Collaborated with senior security engineers during client implementations, primarily in an L1 support and learning role, contributing to deployment execution, testing, and post-deployment support. Followed IT security best practices, deployment standards, and documentation procedures during lab and production activities. Developed stronger understanding of enterprise IT infrastructure, security frameworks, and cross-functional security operations, expanding beyond SOC console-based monitoring.
Education
BCA (Bachelor Of Computer Applications) - MGM’s DR. G. Y Pathrikar College Of CS and IT
2019 - 2022 · Afghanistan