Sanjay Kumar

Cybersecurity Consultant specializing in SIEM Engineering and Detection Engineering. Hands-on experience implementing SIEM (Google SecOps,Sentinel, Elastic), designing MITRE ATT&CK-aligned detection use cases, creating playbooks, reducing SIEM ingestion costs through log optimization, and improving alert fidelity via continuous tuning and attack simulation.

Cybersecurity Consultant (SIEM & Detection Engineering) at Rockladder (2025-09 – Present)

• Implemented Google SecOps (Chronicle) for a mid-sized enterprise (2000+ users), integrating SentinelOne EDR, JumpCloud, AWS, OCI, Netskope, Orca, Slack, and on-prem Windows/Linux servers.
• Designed and implemented automated SOC playbooks for SIEM alerts, including automatic Jira issue creation, alert enrichment, prioritization, and suppression of duplicate/low-confidence alerts to reduce analyst fatigue.
• Designed, deployed, and optimized SIEM detection rules aligned with MITRE ATT&CK across identity, endpoint, cloud, and network telemetry.
• Reduced SIEM data ingestion costs by implementing advanced log filtering, selective source onboarding, and removal of low-value telemetry without degrading detection coverage.
• Led end-to-end detection engineering activities including use case design, rule deployment, retro-hunting, simulated attack validation, and continuous tuning.

Cybersecurity Analyst – L2 (SIEM Operations) at Cywarden Global Services (2024-08 – 2025-09)

• Developed and fine-tuned 300+ SIEM detection rules aligned with MITRE ATT&CK, improving threat visibility and significantly reducing false positives.
• Investigated security alerts and incidents, performed root cause analysis (RCA), and implemented corrective actions to prevent recurrence.
• Supported incident response activities including alert triage, log analysis, and attack pattern investigation.
• Designed and maintained security infrastructure including firewalls, Active Directory, and endpoint protection platforms.
• Hardened AWS cloud environments using CIS benchmarks, IAM best practices, encryption controls, and continuous compliance monitoring.
• Created client-facing Proof of Concepts (PoCs) and Statements of Work (SOWs) for SIEM onboarding and security enhancement projects.

M.Sc. in Cyber Security – National Forensic Sciences University, Goa (2022-08 – 2024)

Bachelor of Computer Applications – Dayanand College, Hisar (2019-07 – 2022)