Vivek Chauhan

Cybersecurity Analyst – SOC / Incident Response

Max Healthcare

Oct 2025 - Present

Security Monitoring & Alert Triage: Continuously monitor and triage security alerts and events across enterprise infrastructure using Seceon SIEM; perform log correlation, anomaly detection, and prioritized incident escalation to reduce mean time to detect (MTTD). Endpoint Detection & Response: Conduct endpoint threat investigations, root-cause analysis, and containment using CrowdStrike Falcon EDR; isolate compromised hosts and hunt for lateral movement indicators to minimize dwell time. Email Security & Phishing Investigation: Manage and analyze email-borne threats via Trend Vision One Email Security; identify phishing campaigns, BEC attempts, and malicious attachments; developed analyst playbooks that improved response efficiency. Cyber Threat Intelligence: Conduct dark-web exposure and threat intelligence investigations using Cybel; proactively identify leaked credentials and organizational risks before exploitation. Web Application Security: Operate Akamai WAF to detect and mitigate DDoS, SQL injection, XSS, and zero-day perimeter attacks; maintained 99.9% availability for critical healthcare applications. Packet & Network Traffic Analysis: Perform network traffic and packet capture analysis to identify anomalous communication patterns and support incident reconstruction and root-cause documentation. Vulnerability Triage & Log Correlation: Execute systematic vulnerability triage and multi-source log correlation across Windows and Linux environments (cloud and on-premise) to resolve security posture anomalies. Incident Documentation & SOC Improvement: Document incident timelines, IOCs, and remediation steps; contribute to SIEM correlation rule tuning and SOC runbook enhancements. Shift Operations: Operate within 24/7 shift rotation and on-call schedules; maintain consistent performance and incident ownership under time pressure.