Bikash Ku. Pradhan

Senior Cybersecurity Engineer with 6+ years of experience in Security Operations, Threat Detection & Response, and SIEM/SOAR engineering across enterprise environments. Expert in designing detection logic, leading threat hunting operations, and managing EDR/XDR, email security, and vulnerability management platforms. Hands-on with Microsoft Sentinel, IBM QRadar, SentinelOne, Splunk, and MITRE ATT&CK frameworks across multi-client SOC environments.

Senior Cyber Security Engineer at Cognizant (2025-08 – Present)

• Lead end-to-end investigation of security alerts across SIEM platforms, performing root cause analysis to classify true positives, eliminate false positives, and assess organizational threat impact.
• Analyze identity and access behaviors (logon anomalies, privilege escalations, password resets) to detect insider threats, account compromise, and misuse patterns at enterprise scale.
• Execute proactive threat hunting using MITRE ATT&CK TTPs and behavioral baselines to surface stealthy threats before alert triggering; design and fine-tune detection rules and correlation logic to reduce SOC alert fatigue.
• Produce detailed investigation reports with technical findings, root cause, risk severity, and actionable mitigation recommendations for client security stakeholders.

Associate — Cyber Security Projects at Cognizant (2023-11 – 2025-08)

• Managed threat intelligence lifecycle using Anomali ThreatStream, integrating IOC feeds and sandbox detonation results to enrich detection pipelines and reduce mean time to detect (MTTD).
• Deployed and administered SIEM solutions including IBM QRadar, Microsoft Azure Sentinel, AlienVault OSSIM, and Exabeam — covering log ingestion, parsing, correlation, and alert tuning across multi-client environments.
• Led phishing analysis and payload validation workflows, dissecting malicious email headers, URLs, and attachments to produce threat intelligence artifacts and client advisories.

Senior Security Analyst at ACL Digital (2022-05 – 2023-11)

• Operated and tuned ManageEngine Log360 SIEM with integrated UEBA and Active Directory Audit capabilities, enabling behavioral anomaly detection and identity-centric threat visibility.
• Managed EDR/XDR solutions — SentinelOne, TrendMicro Apex One, Microsoft Defender for Endpoint, and Defender for Cloud — performing incident triage, containment, and post-incident reviews.
• Executed vulnerability assessment and patch lifecycle management using ManageEngine Desktop Central, prioritizing remediation based on CVSS scores and asset criticality.
• Administered email security platforms (Ironscales, Mimecast) and web content filtering via Cisco Umbrella, reducing phishing exposure and enforcing policy-based web access controls.

Information Security Support Specialist at Multibhashi (2021-04 – 2022-04)

• Managed SIEM operations, firewall protection, Active Directory, and endpoint security (Antivirus/Defender); performed log analysis across AWS CloudWatch and MongoDB to detect anomalies and support IR workflows.

Technical Support Analyst | Sr. Operations Executive at Rupeek / Aegis Global (2018-03 – 2021-04)

• Monitored AWS service, webapp, and finance portal logs to detect intrusions; managed Cisco network devices, TCP/IP configurations, and escalated security incidents for rapid remediation.

B.Tech in Electrical Engineering Technologies – Centurion University of Technology and Management (2012 – 2016)