Ajay Pancholi

Information Security / Security Operations professional with 2+ years of combined experience across SIEM monitoring, incident investigation, vulnerability management, patch validation, cybercrime investigation, network/application security assessment, and compliance-focused documentation. Hands-on with Wazuh SIEM, TheHive, Shuffle SOAR, Sysmon, Nessus, Burp Suite, OWASP ZAP, Nmap, Wireshark, Linux and digital-forensics tools. Experienced in identifying security risks, investigating suspicious activity, supporting containment/remediation, validating corrective actions, and preparing technical and executive-ready security documentation.

Working knowledge of ISO/IEC 27001:2022, NIST CSF, PCI-DSS and RBI-aligned cybersecurity control concepts.

Cyber Security Trainer - DCODETECH INDUSTRIAL TRAINING PVT. LTD. - Mumbai, Maharashtra

(2026-04)

• Deliver hands-on cybersecurity training covering SOC operations, SIEM fundamentals, incident response, networking, Windows/Linux security, vulnerability assessment, ethical hacking, OSINT and digital forensics.
• Run controlled practical labs using Wazuh/Sysmon concepts, Nmap, Wireshark, Nessus, Burp Suite, OWASP ZAP and Linux to teach alert investigation, packet analysis, vulnerability validation and remediation workflows.
• Create incident scenarios, practical exercises, investigation checklists, mock assessments and technical documentation focused on analyst decision-making and job readiness.

Information Security Consultant - MODERN FACILITIES MANAGEMENT PRIVATE LIMITED (CYBER POLICE STATION) - Navi Mumbai

(2025-03 - 2026-04)

• Monitored security events and investigated suspicious activities, performing root-cause analysis and supporting mitigation and corrective actions to improve security posture.
• Conducted system/network vulnerability assessments and security-control reviews to identify weaknesses, exposure and risk-reduction opportunities.
• Supported information-security controls, policy/procedure documentation, investigation reporting and compliance-oriented evidence preparation.
• Researched emerging threats and translated findings into practical mitigation and security-improvement recommendations for stakeholders.

Information Security Consultant - STEALTH MANAGEMENT SOLUTIONS PVT. LTD. (CYBER POLICE STATION) - Navi Mumbai

(2024-03 - 2025-03)

• Performed vulnerability assessments and penetration testing across web applications and infrastructure using Nessus, Burp Suite, Nmap and related security tools.
• Identified authentication, injection, access-control and configuration weaknesses; documented severity, evidence, business/security impact and actionable remediation recommendations.
• Coordinated post-assessment remediation follow-up, verified patch implementation and re-tested findings to confirm security fixes and vulnerability closure.
• Prepared technical findings and investigation documentation for technical and non-technical stakeholders, supporting remediation tracking and follow-up validation.

Security Analyst - MAHARASHTRA CYBER - Mumbai, Maharashtra

(2022-11 - 2023-11)

• Performed vulnerability assessment and penetration testing on government and high-profile applications and documented identified risks and recommended mitigations.
• Supported security investigations, emerging-threat response and coordination with government/technical stakeholders to strengthen cybersecurity protocols.
• Prepared detailed security, investigation and compliance documentation supporting casework, audit/evidence requirements and management reporting.
• Supported implementation and validation of security updates/patches and assisted with system administration and operational IT-security activities.

M.Sc. - Information Technology (Cyber Security) - University of Mumbai (2025-05)

B.Sc. - Information Technology - Shree L. R. Tiwari Degree College (2022-05)