Keshav Singh

About Keshav Singh

I’m a Cybersecurity Professional & Senior SOC Analyst with over 3 years of comprehensive experience in a 24x7 shared SOC at HCLTech, supporting multiple global clients across industries.I have developed expertise in real-time security monitoring using advanced platforms like Splunk and Microsoft Sentinel, achieving an average threat detection time of just 15 minutes. My technical proficiency spans across multiple domains including cloud security for AWS and Azure, IAM solutions such as Okta and SailPoint. I specialize in monitoring, investigating, and responding to security incidents using SIEM, EDR, and MDR tools. My expertise includes:Microsoft Sentinel, Microsoft Defender (MDE/MDO/MDI), and ExpelExternal Threat Intelligence & Digital Risk Protection (ZeroFox)Alert triage, in-depth log analysis, and incident escalation based on severity and impactKey contributions: Improved alert handling processes by reducing false positives and fine-tuning detection use cases Enhanced phishing triage efficiency with Microsoft Defender policies and playbooks Adapted quickly to diverse client environments and their unique security requirementsI hold multiple industry certifications including ITIL®4 Certification, SC-900 Microsoft Certified: Security, Compliance, and Identity Fundamentals, SC-200 Microsoft Certified: Security Operations Analyst Associate, Microsoft Azure Security Engineer Associate, Google Cloud Professional Cloud Architect, and CCNA, while currently pursuing CISSP certification to further enhance my expertise in risk management and security governance. My strong communication skills enable me to prepare comprehensive threat reports and risk advisories for stakeholders at all levels.I’m passionate about continuous learning—whether it’s mastering new tools, earning certifications, or staying ahead of the latest cyber threats and attack trends. My goal is to grow into Tier-2/Incident Response/Threat Hunting roles where I can leverage my SOC expertise to deliver greater impact.

Experience

1. Senior Soc Analyst

   HCLTech

   Dec 2024 — Present · Noida, IN

   As a Senior SOC Analyst at HCLTech, I play a key role in leading incident investigations, detection enhancement, and SOC process optimization for multiple global clients in a 24×7 shared environment.My responsibilities focus on Tier-2 triage, incident response, KQL-based detection engineering, and playbook automation to improve the organization’s security posture. Key Responsibilities & ContributionsLed in-depth investigations of high-severity security alerts (phishing, malware, account compromise, OAuth abuse, MFA fatigue) using Microsoft Sentinel, Microsoft Defender (MDE/MDO/MDI), and Expel.Tuned Defender and Sentinel detection rules to reduce false positives by 30% and enhance MTTD/MTTR by 25–35%.Created and optimized KQL-based analytics rules for advanced attack patterns aligned with MITRE ATT & CK.Developed & maintained SOAR playbooks for enrichment, isolation, and auto-notification — saving analyst time and improving response consistency.Performed proactive threat hunting in Sentinel and M365 logs to identify suspicious activity pre-exploit.Coordinated with cross-functional teams (IR, IT, Threat Intel, DRP) to ensure complete investigation and response closure.Mentored junior analysts by reviewing cases, sharing investigation approaches, and standardizing triage SOPs.Worked closely with use case teams to optimize detection coverage, helping align SOC operations with evolving threat trends.This role has strengthened my expertise in incident response, detection engineering, threat hunting, and SOC leadership, preparing me to take on more advanced roles in IR, Detection & Response, or Threat Hunting teams.

Education

• J.C. Bose University of Science and Technology, YMCA

  Bachelor of Technology - BTech, Computer Science

  2018 — 2022