Ariev Diamond

SOC Analyst (Level 1 and 2) and IAM Analyst with 5+ years of hands-on experience in Splunk SIEM, SPL queries, security alert monitoring, incident investigation, incident response, and threat analysis across Windows, Linux/UNIX, and network environments. Managed identity lifecycles across Active Directory, Azure Entra, Mainframe, LDAP, and UNIX in highly regulated ITAR environments. Strong experience in provisioning/deprovisioning, RBAC, and identity governance using SailPoint.

Proven track record in automating workflows via PowerShell and maintaining audit-ready documentation for NIST compliance.

Experience in MITRE ATT&CK, root-cause analysis, phishing/malware/brute force/lateral movement investigations, and 24/7 SOC operations. Proven ability to validate alerts, reduce false positives, tune detections, and document investigations with clarity.

Sr. Cyber Security Analyst - Tata Consultancy Services

(2025-01 - 2026-04)

Aviation sector role focused on investigating security events and managing identity lifecycles in highly regulated environments.

• Investigated distinctive security events across AD, Entra, LDAP, UNIX, and Mainframe.
• Resolved escalated access anomalies and complex security tickets.
• Developed and maintained SOPs aligned with NIST/ITAR.
• Manage identity lifecycle for 5,000+ users across AD, Azure Entra, LDAP, UNIX, and Mainframe, ensuring strict adherence to ITAR and NIST regulations.
• Executed end-to-end provisioning/deprovisioning and account modifications (EDIMS, Mainframe, Unix) for US and Canadian environments.
• Leverage SailPoint workflows and PowerShell scripting to automate access management, reducing manual errors and simplifying group modifications.
• Collaborate with stakeholders to define and implement Role-Based Access Controls (RBAC) and resolve complex IAM tickets within SLA.
• Develop and maintain Standard Operating Procedures (SOPs) and configuration guides for team knowledge transfer and audit readiness.

Splunk Analyst - Tata Consultancy Services

(2022-01 - 2024-12)

Manufacturing sector role performing security investigations and threat hunting using Splunk SIEM in 24/7/365 SOC operations.

• Performed L1 investigations using Splunk and Sumo Logic; deep-dive analysis across Windows, Linux, and network logs.
• Built/refined SPL queries for threat hunting, log extraction, and detection improvements.
• Closed 300+ high-priority incidents, reducing alert backlog by 95% in a 24/7/365 SOC.
• Investigated phishing, malware, brute force, unauthorized access, and lateral movement.
• Distinguished true vs false positives using OSINT, correlation, and behavioral analysis.
• Recommended alert tuning and detection enhancements; reduced false positives.
• Documented investigations, findings, and remediation steps in ServiceNow.
• Screened and detected issues across Windows servers, mobile devices, and machines.
• Reported daily to Tier 2/3 teams to resolve active threats.

Security Analyst - Tata Consultancy Services

(2021-02 - 2022-01)

Insurance sector role conducting L2 analysis of security event data and SIEM tuning.

• Conducted L2 analysis of large-scale security event data in QRadar.
• Tuned SIEM rules to improve detection accuracy and reduce false positives.
• Mapped threats to MITRE ATT&CK and identified emerging patterns.
• Delivered weekly reports on threats, log analysis, and SLA performance.
• Performed follow-up analysis across the incident lifecycle.

Junior Cybersecurity Consultant [Intern] - White Cloud Security

(2020-06 - 2020-12)

Consulting internship focused on Red Team techniques and Linux security.

• Applied Red Team techniques using VMware, Putty, and Kali Linux.
• Automated SSH key processes and analyzed Linux kernel logs.

B.S. - Computer Engineering - University of Texas at San Antonio