Karan Khatri
Security Analyst
About
Security Analyst with 2+ years of hands-on experience in Security Operations Center (SOC) environments, specializing in SIEM-based threat detection, incident response, and threat hunting. Proficient in monitoring and analyzing security events across diverse security appliances, with a strong background in Electronics & Communication Engineering. Demonstrated ability to manage compliance, fine-tune detection use cases, and collaborate across NOC, IT, and business units to contain and remediate security incidents swiftly.
Skills & Expertise (50)
Work Experience
Security Analyst
Paytm Payment Bank
Jan 2026 - May 2026
Monitored and analyzed security events in real time using SIEM tools (DNIF) to detect potential threats and minimize dwell time. Created, fine-tuned, and optimized SIEM use cases to improve detection accuracy and significantly reduce false positives. Conducted proactive threat hunting to identify hidden threats, anomalous network behavior, and advanced persistent threats. Investigated alerts, performed root cause analysis, and escalated confirmed incidents per defined incident response procedures. Managed compliance monitoring ensuring logs and alerts aligned with RBI and CERT-IN regulatory security standards. Collaborated with incident response and IT teams to effectively contain and remediate security incidents within SLA.
Security Analyst
Securview System Pvt. Ltd. (Acquired by Gruve.ai) — Client: Paytm Payments Bank
Jul 2024 - Dec 2025
Monitored security events from multiple channels including SIEM, security appliances, and email threat platforms. Performed triage, investigation, containment, and eradication of security incidents, maintaining high-quality SLA adherence. Collaborated with NOC, IT, and business units to investigate and remediate detected security incidents end-to-end. Vetted and blocked Indicators of Compromise (IOCs) sourced from RBI, CERT-IN, and threat intelligence feeds. Conducted brand monitoring: identified and took down phishing sites, fake social media handles, and fraudulent customer care numbers using CloudSek. Configured dashboards, fine-tuned SIEM use cases, and analyzed traffic logs based on ad hoc customer requests. Performed device health checkups to detect log stoppage and reported anomalies to the admin team and OEM. Produced daily, weekly, and monthly security reports covering delivery metrics, appliance health, and critical device status. Monitored SIEM component health including CPU utilization, EPS thresholds, and log volume deviation. Maintained trackers for blocked rogue IPs, security advisories, whitelisting requests, and alert management. Escalated cases to L3, end users, device owners, and OEM per defined escalation matrix and severity levels.
Education
B.Tech — Electronics & Communication Engineering - PSIT, Kanpur
- 2015 · Afghanistan
Class XII - Kendriya Vidyalaya BNDM (C.B.S.E.)
- 2010 · Afghanistan
Class X - Kendriya Vidyalaya CTPS (C.B.S.E.)
- 2008 · Afghanistan
Certifications
No certifications added yet
Interested in this developer?
Profile Score Breakdown
Profile Overview
Skills (50)
Click a skill to find developers with the same skill