Alan V

Blue team-focused cybersecurity professional with 1.5+ years of hands-on SOC experience with team lead responsibilities across 8+ client environments. Proven track record in threat detection and incident response — including end-to-end containment of LockBit and DragonForce ransomware incidents. Skilled in SIEM engineering, EDR operations (CrowdStrike, MS Defender, SentinelOne), SOAR automation, and multi-cloud security across AWS, GCP, Azure, OCI, and Google Workspace.

Certified

Multi-Cloud Blue Team Analyst (MCBTA) with additional hands-on experience in digital forensics and malware analysis. Targeting product company internal SOC or detection engineering roles.

SOC Analyst | Team Lead at Necurity Solutions Network Security Pvt. Ltd. (2024-11 – Present)

• Lead a 9-member SOC team handling L2/L3 operations across 8+ client environments — triaging 20+ alerts daily and managing escalation, shift coverage, and analyst development.
• Detected and contained 3 ransomware incidents end-to-end (2× LockBit, 1× DragonForce) — executing full DFIR lifecycle: containment, eradication, recovery, and post-incident reporting with root cause analysis.
• Engineered 20+ custom SIEM detection rules across Wazuh and SentinelOne, integrating multi-source logs from Windows Events, Linux Syslog, GCP, OCI, O365, and Google Workspace — improving threat detection coverage by 50%.
• Built SOAR automation playbook for alert triage workflows, reducing manual analyst workload by 40% and cutting response time on recurring alert patterns.
• Managed IAM-related security incidents including anomalous login detection, privilege escalation alerts, and access policy reviews via Duo Security.
• Conducted digital forensics for law enforcement engagements — acquiring and analysing evidence from compromised endpoints, servers, and mobile devices; produced formal DFIR reports.
• Performed BEC and credential-based attack investigations using CrowdStrike Falcon, MS Defender, and Bitdefender; implemented preventive controls and improved detection logic post-incident.

Bachelor of Computer Applications (BCA) – IGNOU (2026)

Self-Study in Cybersecurity (SOC, Network Security, Malware Analysis, DFIR, Cloud Security) (2023-09 – 2024-09)

Higher Secondary (Class XII) – Brennen Higher Secondary School (2020-07 – 2022-03)