Nafisur Shaikh

Results-driven Cyber Security professional with 10+ years of experience across SOC operations, Threat Hunting, Incident Response, and Endpoint Security. Currently leading proactive threat hunting operations across 32+ global clients at (Big 4) in a multi-tenant MSSP environment. Proven expertise in hypothesis-driven hunting, MITRE ATT&CK-aligned investigations, SIEM/EDR/XDR platforms, and advanced attack chain reconstruction, and driving measurable security improvements.

Actively expanding into Incident Response to build a comprehensive offensive-defensive security profile.

Senior Consultant at Big 4 (2022-09 – Present)

Job Role: SOC (Threat Hunting and Incident Response)

• Lead Threat Hunting operations across 32+ global clients in a multi-tenant MSSP environment, driving proactive detection and risk reduction.
• Conduct hypothesis-driven hunts, IOC/TTP-based investigations, and emerging threat-based hunts aligned with MITRE ATT&CK and client-specific threat landscapes.
• Successfully identified early-stage intrusions and suspicious attacker behaviors during proactive hunts, leading to rapid incident response activation and containment before business impact.
• Perform advanced threat investigations by analyzing endpoint, network, authentication, and cloud telemetry to identify anomalies, malicious activity, or early-stage intrusions.
• Act as Primary Incident responder during major or escalated incident which include end to end Forensics analysis and Incident Report.
• Apply strong knowledge of cybersecurity frameworks such as MITRE ATT&CK, Cyber Kill Chain, during threat investigations and hunting activities.
• Leverage expertise in SIEM platforms including Splunk, IBM QRadar, Stellar Cyber, Azure Sentinel, and Sentinel One for log analysis, query creation, and detection tuning resulted 23% reduction in False positive alerts.
• Utilize OSINT and APT attribution techniques to track threat actor behavior, campaigns, and evolving TTPs relevant to MSSP clients.
• Prepare comprehensive threat-hunting reports including observations, risks, misconfigurations, and actionable remediation recommendations. And converting TH outcome as detection Use cases across SIEM platform
• Engage with clients to gather requirements, clarify project scope, present hunting insights, and align on security priorities.
• Mentor and delegate tasks to junior analysts based on skill, experience, and project needs, ensuring consistent high-quality deliverables.
• Used Python to automate manual reporting of daily threat intel IP reports with integration with OSINT Threat intelligence API's.
• Maintain strong awareness of the evolving modern threat landscape and helping clients on creating a proactive cyber defense.

Consultant at Capgemini India PVT LTD (2020-07 – 2022-09)

Job Role: Endpoint Security solution architect

• Managing, implementing and administrating multiple endpoint security solution such as EDR crowd strike, Trend Micro Deep Security, Zscaler Proxy, Zscaler private access (VPN) on multi-client environment for more than 50K + users and devices.
• Reviewing Firewall Service Request, VPN Request, exclusion request over service now tool with risk evaluation and recommendation.
• Conducted risk assessments on network security by identifying and reporting risky open ports and firewall rules using the Algosec Firewall Analyzer. Coordinated with the security operations team to ensure timely remediation and closure of identified vulnerabilities.
• Reviewed security solutions in alignment with best practices, RBI guidelines, and ISMS policies. Prepared comprehensive reports highlighting open issues, and coordinated with relevant teams to ensure timely follow-up and resolution.
• Reviewing and providing USB device access through CrowdStrike Console which requested by user in service now ticket. Performing AV Whitelist requests, file exclusions. Working on escalated incidents which needed L2 or L3 Support.
• Monitoring of attack triggered in Honey Pot solution and advance analysis of the attack vector.
• Creation and Updating of SOP. Service improvement Plan on JIRA and on demand report requested by client.
• Coordinating with Vendor for Escalated issue related to Zero Day and other product related issues.

MBA in IT and project Management – Bharati Vidyapeeth (2022 – 2024)

Bachelor of Commerce in B.com – University of Mumbai (2014)

HSC – MSBSHSE (2011)

SSC – MSBSHSE (2009)