Security Administrator at EbixCash (2024-02 – Present)
Orchestrated deployment and management of endpoint detection and response systems, firewall administration, and compliance automation across large-scale government and enterprise environments.
- Orchestrated deployment and management of SentinelOne EDR across 750+ National Informatics Centre (NIC) offices statewide, delivering comprehensive endpoint protection and real-time threat visibility.
- Implemented Unified Endpoint Management (UEM) KACE solution for 400+ state center devices, streamlining configuration, patch management, and compliance enforcement.
- Administered and optimized Check Point firewall operations, configuring traffic policies, access controls, and security rules to secure network communications.
- Managed remote access to district-deployed firewalls (Sophos and WiJungle NGFW), performing configuration updates, policy enforcement, monitoring, and troubleshooting across distributed environments.
- Conducted in-depth remote log analysis using firewall logs, Windows Event Viewer, SentinelOne EDR, and KACE UEM to extract security intelligence, detect anomalies, support forensic investigations, and enable rapid incident response.
- Engineered PowerShell-based automation framework to validate 120+ CDAC compliance standards, reducing audit preparation time by 60% via automated verification, reporting, and remediation.
- Collaborated with CERT-In and development teams to assess vulnerabilities and remediate critical issues in web applications and C2C server infrastructure.
- Managed end-to-end audit compliance, ensuring adherence to organizational policies, regulatory standards, and industry best practices.
- Performed advanced incident investigations using Windows Event Viewer, system logs, and forensic tools to identify root causes, contain threats, and implement preventive controls.
- Leveraged Advanced Excel with Copilot for security analytics, data visualization, trend analysis, and executive reporting.
- Supported critical infrastructure security, including CCTV and fire safety system monitoring for high-stakes facilities.
Security Operations Center Analyst at RRG Engineering Technologies Pvt. Ltd. (2022-12 – 2023-07)
Conducted real-time security event monitoring, threat hunting, and incident response using SIEM and EDR platforms.
- Conducted real-time security event monitoring and proactive threat detection using Blu Sapphire SIEM platform.
- Executed threat hunting to identify advanced persistent threats (APTs), anomalous behaviors, and sophisticated attack vectors.
- Deployed Kaspersky EDR for rapid endpoint threat identification, investigation, and response — reducing mean time to resolution.
- Optimized SIEM correlation rules and EDR detection policies, improving threat detection efficiency by 35% and reducing false positives.
- Produced actionable intelligence reports on emerging threats, attack patterns, and risk trends.
- Led incident response focusing on containment, eradication, recovery, and post-incident improvement.
Security Operations Center Analyst at E2E Networks Limited (2022-08 – 2022-10)
Monitored security alerts in 24/7 SOC environment, configured SIEM systems, and developed IDS signatures.
- Monitored and investigated alerts in 24/7 SOC environment for continuous threat detection and response.
- Configured and managed WAZUH SIEM for log analysis, event correlation, and distributed security monitoring.
- Developed and implemented IDS signatures to detect network-based attacks and malicious activities.
- Utilized AbuseIPDB threat intelligence to block malicious IPs and prevent attacks.
- Performed email security assessments, vulnerability analysis, and network bandwidth monitoring to detect anomalies.
- Created incident tickets and coordinated Tier 2 escalations.
- Contributed to SOC SOPs, training materials, and process improvements.
Technical Support Executive at Teleperformance (2021-12 – 2022-05)
Provided enterprise-grade technical support for Microsoft products and maintained security knowledge base.
- Provided enterprise-grade support for Microsoft products via phone/chat, resolving complex issues with high customer satisfaction.
- Diagnosed technical problems using root-cause analysis and troubleshooting methodologies.
- Managed tickets in high-volume environment, ensuring adherence to SLAs and data protection standards.
- Maintained knowledge of Microsoft security policies and updates; contributed to internal knowledge base with troubleshooting guides.
