About
Results-driven Cybersecurity professional with 5 years of comprehensive experience in Vulnerability Assessment & Management (VAM), Application Security, and Security Operations Center (SOC) operations. Demonstrated expertise in identifying, analyzing, and mitigating security risks across applications, infrastructure, and cloud environments. Proven track record of reducing critical vulnerabilities by 35% and improving SIEM alert accuracy through strategic tuning and remediation tracking. Strong hands-on experience with vulnerability scanning tools (Nessus, Qualys), SIEM monitoring (Arcsight), incident response, and security compliance (ISO 27001, SOC2). Adept at coordinating with cross-functional teams to ensure timely vulnerability remediation and maintaining robust security posture.
Skills & Expertise (37)
Work Experience
Cybersecurity Analyst - Vulnerability Assessment & Management
Tech Mahindra
Aug 2023 - Present
Conduct comprehensive vulnerability assessments across enterprise infrastructure using Nessus, Qualys including servers, network devices, cloud workloads, and applications. Perform application security assessments focusing on OWASP Top 10 vulnerabilities, API security risks, and authentication/authorization flaws using Burp Suite Professional and OWASP ZAP. Analyse vulnerability scan results and prioritize remediation efforts based on CVSS scores, business impact, exploitability, and threat intelligence. Manage end-to-end vulnerability lifecycle from discovery through validation, remediation tracking, and closure verification using ServiceNow and JIRA workflows. Coordinate with IT Operations, Development, and DevOps teams to ensure timely vulnerability remediation within defined SLAs (Critical: 7 days, High: 30 days, Medium: 60 days), achieving 88% SLA compliance. Reduced critical vulnerabilities by 35% through structured remediation tracking, prioritization framework, and stakeholder engagement. Prepare detailed risk assessment reports, executive dashboards, and vulnerability trend analyses for management review and decision-making. Support compliance and audit requirements by providing evidence, documentation, and remediation status for ISO 27001, SOC2, and internal security audits. Support patch management programs by identifying missing patches, coordinating deployment schedules, and conducting post-remediation validation scans. Conduct security assessments for new applications and infrastructure deployments, providing security recommendations and risk mitigation strategies.
Security Operations Center (SOC) Analyst
Tech Mahindra
Dec 2021 - Jun 2023
Performed 24/7 security monitoring and incident triage as part of Level 1/Level 2 SOC operations, handling 100+ security alerts daily. Monitored ArcSight SIEM dashboards to identify and investigate security events including brute force attacks, malware infections, suspicious login attempts, and data exfiltration attempts. Investigated phishing emails, malicious attachments, and suspicious URLs using Mimecast, VirusTotal, and sandbox environments to determine threat levels. Analyzed security logs from multiple sources including firewalls, Active Directory, EDR solutions, proxy servers, and web application firewalls to identify anomalous activities. Reduced SIEM alert noise by 30% through strategic tuning of correlation rules, adjusting thresholds, and implementing whitelist filters for known benign activities. Mapped security incidents to MITRE ATT&CK framework techniques to understand adversary tactics and improve detection capabilities. Participated in incident containment and recovery actions by coordinating with system administrators to isolate infected systems, block malicious IPs, and remove threats. Escalated confirmed security incidents to L2/L3 teams with comprehensive documentation including IOCs, affected assets, timeline, and recommended actions.
Education
Bachelor of Technology (B.Tech) in Electronics & Communication Engineering - Prakasam Engineering College
- 2020 · Afghanistan
Certifications
No certifications added yet
Interested in this developer?
Profile Score Breakdown
Profile Overview
Availability Details
Visa Status
Need Sponsorship
Relocation
Depends on Offer
Skills (37)
Click a skill to find developers with the same skill
