Aashwal Dixit

Cybersecurity Engineer with 5+ years of experience in cloud security operations, SIEM engineering, EDR integration, and security automation across enterprise environments. Specialized in multi-cloud (AWS & Azure) threat detection, incident response, and CSPM using Wiz, with hands-on expertise in Microsoft Sentinel (KQL, analytics, playbooks) and serverless security automation (Azure Functions, AWS Lambda). Proven ability to design and implement scalable security detection and response workflows, reduce MTTR by ~70%, and proactively minimize cloud attack surface through detection engineering and automated remediation.

Strong experience in Infrastructure as Code (Terraform, CloudFormation, Bicep) with integrated security scanning (tfsec, Checkov) and policy enforcement in CI/CD pipelines.

Cyber Security Engineer - Indus Valley Partners - Noida

(2025-08)

• Developed high-fidelity detection rules and automated playbooks in Microsoft Sentinel (KQL), correlating signals from Wiz, CrowdStrike, and Defender for Cloud to detect lateral movement, IAM abuse, and suspicious API activity
• Leveraged Wiz Security Graph to identify attack paths, toxic risk combinations (public exposure + IAM + vulnerabilities), and prioritize remediation based on critical asset exposure
• Architected and implemented serverless incident response workflows using Azure Functions, AWS Lambda, and Logic Apps, reducing MTTR by ~70%
• Conducted deep-dive cloud threat investigations, improving incident triage efficiency and reducing investigation time
• Designed detection logic for IAM abuse, anomalous API behavior, and privilege escalation scenarios across AWS environments
• Implemented secure CI/CD controls, including private npm registry to mitigate dependency confusion risks
• Deployed Fortinet SASE & FortiAnalyzer for centralized logging and zero-trust enforcement
• Led vulnerability assessment and remediation efforts, reducing critical cloud exposure risks and improving overall security posture
• Implemented Terraform-based infrastructure provisioning, ensuring secure and consistent cloud deployments
• Integrated tfsec and Checkov into CI/CD pipelines to detect IaC misconfigurations pre-deployment
• Managed remote Terraform state (S3/Azure Storage) with encryption and access control
• Applied policy-as-code (Azure Policy, AWS SCPs) to enforce security baselines
• Collaborated with DevOps teams to embed security controls into IaC pipelines, enabling shift-left security

Security Operations Engineer - Nokia Networks & Solutions Ltd. - Gurugram

(2023-10 - 2025-08)

• Performed threat hunting across cloud and endpoint environments using SIEM and EDR tools
• Integrated AWS telemetry with Splunk SIEM, improving cloud threat visibility and detection coverage
• Developed and tuned correlation rules, improving detection accuracy by 25%
• Built automated response workflows for alert triage and containment, reducing manual effort
• Designed dashboards for security monitoring, incident tracking, and operational metrics
• Supported incident response, forensic investigations, and root cause analysis

Analyst (MXDR - SOC) - Deloitte USI - Gurugram

(2021-07 - 2023-10)

• Investigated AWS security events (CloudTrail, GuardDuty, IAM logs)
• Integrated Crowdstrike with Splunk SIEM to get all EDR telemetry into On Premises SIEM
• Performed all SIEM/EDR engineering tasks
• Developed detection rules for suspicious API activity, credential misuse, and anomaly detection
• Monitored and responded to security incidents (malware, phishing, unauthorized access)
• Performed log correlation and threat detection using Splunk and Exabeam
• Delivered incident reports and risk insights to stakeholders

Master of Computer Applications - Computer Applications - Chandigarh University

Bachelor of Computer Applications - Computer Applications - University of Lucknow