Skills
SIEM & Monitoring Platforms: Splunk, IBM QRadar, Wazuh, Elastic Stack (ELK), Microsoft Sentinel
Endpoint & Network Security Tools: CrowdStrike Falcon, Palo Alto Cortex, Microsoft Defender for Endpoint, Sophos, ESET, Wireshark, Nmap
Threat Intelligence & Hunting: MITRE ATT&CK, YARA Rules, MISP, ThreatConnect, VirusTotal, OpenCTI, OWASP Top 10, OSI Model
Security Orchestration & Automation (SOAR): Cortex XSOAR, Splunk SOAR (Phantom), IBM Resilient, Swimlane, Siemplify
Vulnerability Management & Scanning: Tenable.sc, Nessus, Qualys, Rapid7 InsightVM, OpenVAS, Burp Suite Pro, Nikto
Penetration Testing & Exploitation Tools: Metasploit Framework, Nmap, Burp Suite, Nikto
Cloud Security & IAM: AWS Security Hub, Azure Security Center, GCP Security Command Center, Prisma Cloud, Okta, Azure AD, IAM, RBAC, SSO, MFA
Compliance & Risk Frameworks: NIST 800-53, NIST CSF, ISO 27001, SOC 2, HIPAA, PCI-DSS, CIS Controls, MITRE D3FEND
Scripting & Automation: Python, PowerShell, Bash, JSON/YAML parsing
Incident Response & Forensics: TheHive, FTK Imager, GRR Rapid Response
Operating Systems & Environments: Windows Server, Linux (Ubuntu/CentOS/Kali), Active Directory, VMware, Hyper-V, VirtualBox
Networking & Protocols: TCP/IP, DNS, HTTP/S, FTP, VPN, SSL/TLS, DHCP, SNMP, SMB
Professional Tools & Platforms: JIRA, ServiceNow, Confluence, Git, GitHub, Trello, Slack
About
Highly skilled and results-driven Cybersecurity Analyst with over 2 years of hands-on experience in SOC operations, threat detection, vulnerability management, and Zero Trust security frameworks. Proven expertise in deploying and managing SIEM platforms (Splunk, Wazuh), EDR tools, and implementing DevSecOps practices in both on-prem and cloud environments. Demonstrated success in supporting enterprise cybersecurity initiatives across the Canada and India, with a strong grasp of NIST, HIPAA, GDPR, and SOC 2 compliance requirements. Experienced in penetration testing, incident response, and cloud security integration using AWS, GCP, and Azure. Adept at collaborating with cross-functional teams to secure CI/CD pipelines and improve the organization’s overall security posture.