Ismail C

Security Engineer with 10+ years of experience across Linux infrastructure, SIEM engineering, security monitoring, and enterprise operations, currently at Wazuh Inc. Deep hands-on expertise across the full Wazuh ecosystem - Manager, Indexer, Dashboard, Agents, File Integrity Monitoring, Security Configuration Assessment, Vulnerability Detection, Anomaly Detection, and Active Response - plus OpenSearch/Elastic, Docker/Kubernetes, Wazuh Cloud, AWS security integrations, clustering, and TLS/mTLS. Skilled in custom rule and Sigma-rule detection engineering and in automating SOC workflows with Python, Bash, Shuffle, n8n, and Power Automate.

Security Engineer L3 - Wazuh Inc

(2024-08)

• Implement and support enterprise Wazuh SIEM environments - Managers, Indexers, Dashboards, and agent fleets - across on-premises, Wazuh Cloud, Docker, and Kubernetes.
• Integrate AWS security and log sources (CloudWatch, GuardDuty, CloudTrail, S3) for centralized cloud monitoring.
• Design and optimize OpenSearch ingest pipelines, index templates, and ILM policies.
• Tune and develop custom detection rules and decoders, including Sigma rule conversion, reducing false positives.
• Diagnose complex production issues spanning Wazuh agents, Filebeat, indexing, TLS/mTLS, and clustering.
• Automate operational tasks with Python/Bash and build SOC workflow integrations using Shuffle, n8n, Power Automate, DFIR-IRIS, MISP, and VirusTotal.
• Apply AI/LLM-assisted approaches to security-event analysis and alert summarization for faster SOC investigation.

Senior Linux & SIEM Engineer - Soffit Infrastructure Services Pvt Ltd

(2022-01 - 2024-12)

• Owned end-to-end SIEM onboarding for new clients, from requirements gathering and environment assessment through SIEM deployment, log-source integration, detection configuration, validation, and handover to operations.
• Designed and deployed enterprise SIEM environments using Wazuh and the Elastic Stack.
• Integrated firewalls, IDS/IPS, endpoints, AWS, Microsoft 365, Azure, and API-based sources into centralized monitoring.
• Automated log parsing and enrichment workflows, cutting manual analyst effort by 40%.
• Performed Linux hardening, SIEM upgrades, clustering, HA configuration, and RBAC/SSH access controls.

Senior System Administrator - Matrimony.com Ltd

(2015-01 - 2022-12)

• Maintained Linux and Windows server environments across 12 hub locations, sustaining 99% uptime.
• Managed FortiGate firewalls, Cisco switches, SSL VPN, and LAN/WAN infrastructure.
• Administered Active Directory, Office 365, Azure, NAS storage, and backup infrastructure.

System Administrator - DATAFAST Solutions

(2012-01 - 2014-12)

• Managed web-hosting environments using cPanel, WHM, and Plesk; performed Linux/Windows server administration and troubleshooting.

MBA - Information Systems Management - Bharathiar University

Professional Diploma - Network Engineering

BA - English - University of Calicut