Esha Samanta

Cybersecurity professional with almost 5 years of experience spanning SIEM engineering, security operations, incident response, and governance frameworks. Proven ability to design and manage security controls, develop compliance-aligned policies, and deliver executive-level risk reporting. Now bringing deep technical expertise into GRC to bridge the gap between security operations and enterprise risk management.

Holds ISO 27001 Audit Training and ECIH certification; actively pursuing ISO 27001 Certification.

Senior Security Consultant - Reliance Industries, Navi Mumbai (Quess Corp) - Navi Mumbai

(2025-03)

• Manage end-to-end security incidents using Trend Micro XDR, including alert triage, investigation, containment, remediation, and SLA tracking.
• Perform static malware analysis, validate IOCs, and maintain audit-ready incident records to support timely response and risk mitigation.
• Work closely with application, infrastructure, and security teams to align security operations with organizational policies and compliance requirements.
• Support IT General Controls (ITGC) and SOX compliance by reviewing logical access, user provisioning, privileged access, password management, change management, and security monitoring controls.
• Collect audit evidence, perform control testing, document observations, identify control gaps, and track remediation activities with control owners.
• Participate in User Access Reviews (UAR), Privileged Access Reviews, and Segregation of Duties (SoD) assessments while maintaining audit documentation and evidence for internal and external audits.
• Assist in IT risk assessments by identifying control gaps, documenting risks, and recommending practical remediation to improve the overall control environment.

Associate Cybersecurity Analyst – SIEM Engineering - Cybalt (Black Box Network Services India), Navi Mumbai - Navi Mumbai

(2021-09 - 2025-03)

• Managed and administered the Securonix SIEM platform, including log source integration, user access management, system configuration, platform health monitoring, and optimization.
• Built and fine-tuned detection rules, dashboards, and MITRE ATT&CK-aligned use cases, while collaborating with engineering teams to develop new detection content based on customer requirements and reduce false positives.
• Developed incident response playbooks and SOPs, and prepared weekly incident reports and monthly executive reports, translating technical findings into clear, actionable insights for customers and management.
• Mentored junior analysts by providing technical guidance, reviewing investigations, and supporting their day-to-day development.

Incident Response Specialist - Cybalt (Black Box Network Services India), Navi Mumbai - Navi Mumbai

(2021-09 - 2025-03)

• Managed the complete incident response lifecycle for malware, phishing, DDoS, and web application attacks, from investigation and containment to recovery and post-incident review, while consistently meeting SLA commitments.
• Investigated security incidents by analyzing endpoint, firewall, proxy, and network logs to identify root causes and recommend effective remediation.
• Prepared incident reports covering impact analysis, affected systems, root cause, and lessons learned to support audit requirements and continuous improvement.
• Collaborated with Digital Forensics, Malware Analysis, and Threat Intelligence teams to investigate complex security incidents and strengthen response efforts.
• Developed and maintained incident response playbooks and SOPs, supporting Business Continuity (BCP) and Disaster Recovery (DR) preparedness.

B.Tech - Computer Science & Information Technology - ITER, Odisha (2017 - 2021)