Ram Bhupal

Security Analyst with 8 years of experience across SOC monitoring, vulnerability assessment, and incident response for enterprise and cloud environments. Experienced in IBM QRadar, Qualys VMDR, Incident Response, Phishing Investigation, Cisco IronPort, ServiceNow, and ISO 27001 compliance. Skilled in security monitoring, log analysis, event correlation, vulnerability remediation, and cross-functional collaboration across Windows, Linux, AWS, and enterprise environments.

Track record of ISO 27001 compliance support and being the first point of contact for on-floor security incidents, backed by multiple performance awards.

Security Analyst at Tata Consultancy Services (TCS) (2021-08 – Present)

• Own end-to-end vulnerability assessment lifecycle using Qualys: Ran scheduled BAU and ad-hoc Qualys scans across ~500+ Windows, Linux, and network assets, including AWS EC2 instances, deploying and maintaining cloud scanning agents.
• Tracked vulnerability remediation against client SLAs, distributing monthly patch and scan reports to 5+ stakeholder teams and driving open vulnerabilities to closure.
• Escalated a persistent scanning/reporting defect as a formal vendor case, resolving a tool-functionality gap that had been affecting scan accuracy.
• Produce and distribute monthly patch reports and a monthly Security Metrics Report covering SIEM, Citrix log analysis, security events, and incident tracking.
• Resolved a persistent Qualys scanning/reporting defect by opening and driving a vendor case to closure, restoring reliable reporting for the VM program.
• Well coordination with the other internal business teams in healthy and trusted environment in resolving the issues and bring the best practices in day-to-day BAU activities without any escalations.
• Performed daily QRadar health checks (backups, syslog, Windows/Linux/App/IMM log flow) across 1200+ log sources, escalating gaps to source-owning teams to maintain SIEM data integrity.
• Integrated new log sources into QRadar and fine-tuned correlation rules after Citrix log analysis, improving detection accuracy and reducing false-positive noise.
• Triaged user-reported phishing submissions via SOAR and investigated DLP-quarantined mail in Cisco IronPort, closing the majority of cases within same-day SLA.
• Conducted quality review of closed SIEM offenses on a recurring basis, identifying handling errors and feeding corrections back into analyst process documentation.
• Produced weekly Joiners/Leavers reports for the ISM team and monthly Security Metrics reports covering SIEM health, Citrix activity, and incident trends.
• Acted as first point of contact for incident triage on the floor, correlating events across log sources to support faster incident classification.
• Meeting the expectations of management in deliverables on time and desired quality.
• Good in communication skills and documenting the SOP's.

Information Security Analyst/Infosec Analyst at Tata Consultancy Services (TCS) (2018-07 – 2021-08)

• Ran bi-monthly weak-password audits using John the Ripper across in-scope systems, reporting non-compliant accounts to system owners for remediation.
• Working as an internal auditee from infosec function owning physical/logical access, change management, Compliance and security incident management processes.
• Monitored security logs and alerts to detect and respond to incidents, supporting incident response and root-cause analysis for confirmed security events.
• Delivered security awareness training to employees; a follow-up phishing simulation showed roughly 15% fewer click-throughs on simulated social engineering emails.
• Perform Monthly, Weekly, Quarterly Security Compliance checks to identify the gaps.
• Collected and organized audit artefacts for ISO 27001 and internal audits, contributing to zero major non-conformities across audit cycles supported.
• Maintained incident response and disaster recovery documentation, keeping playbooks current for cross-functional security teams.
• Conducted monthly physical security sweeps and compliance checks, documenting findings in monthly information security compliance reports.
• Partnered with IT teams to prioritize and apply security patches, reducing the window of exposure for known vulnerabilities.

MBA in Computer Science & Data Analytics – Manipal University Jaipur (2026-03)

B. Com in Computer Science – Indo-American Degree College (2018)