Vaibhav More

About Vaibhav More

SIEM and Detection Engineer with over four years of experience working in regulated banking SOC environments, currently employed as a System Engineer at Tata Consultancy Services. I specialize in SIEM detection engineering using Splunk, with a strong focus on building, tuning, and maintaining high quality security detection use cases.My experience includes designing correlation searches across authentication, network, endpoint, and transaction related log sources to detect credential abuse, brute force attacks, anomalous access patterns, and suspicious user behavior. I work extensively on alert optimization and false positive reduction through baselining, threshold tuning, and contextual enrichment to ensure alerts are actionable and meaningful for SOC teams.I actively support security investigations by performing deep log analysis, validating alerts, and providing contextual insights to help confirm true positives and close incidents efficiently. My detection approach is aligned with attacker behavior mapped to the MITRE ATTACK framework, which helps ensure structured coverage and effective alert prioritization.In addition to core SIEM responsibilities, I have contributed to internal innovation initiatives involving real time analytics using Splunk and have received multiple internal recognitions for delivery, innovation, and team collaboration.I am interested in opportunities focused on SIEM Engineering, Detection Engineering, and Security Analytics roles within enterprise or banking environments.

Experience

1. System Engineer

   Tata Consultancy Services

   Dec 2021 — Present · Pune, IN

   Working as a System Engineer in a regulated banking SOC environment with primary responsibility in SIEM and detection engineering using Splunk. My role focuses on designing, tuning, and maintaining high quality SIEM detection use cases to support security monitoring and incident response.I have hands on experience building correlation searches across authentication, network, endpoint, and transaction related log sources to detect credential abuse, brute force attacks, anomalous access patterns, and suspicious user behavior. I actively work on alert tuning, baselining, and false positive reduction to improve alert quality and ensure actionable outcomes for SOC teams.I support security investigations by performing deep log analysis, validating alerts, and providing contextual insights to help confirm true positives and close incidents effectively. My detection approach aligns with attacker behavior mapped to the MITRE ATTACK framework to ensure structured coverage and effective alert prioritization.In addition to core SIEM responsibilities, I have contributed to internal innovation initiatives involving real time analytics using Splunk and have received multiple internal recognitions for delivery, innovation, and team collaboration.

Education

• Shivaji University

  Bachelor of Engineering - BE, Mechanical Engineering