Vijay Kumar

About Vijay Kumar

Working as a SOC Lead (L3), managing Security Operations Center in MSSP environment, responsible for entire SOC operations, and handling Vulnerability Management. • Monitored and responded to security events/incidents for clients in 24/7 environment.• Expertise in Security Monitoring, utilizing security products such as SIEM, EDR, MDR, DLP, Email Security, Proxies and alongside proven experience in InfoSec and Cybersecurity standards.• Regular client interactions to understand concerns and channelize team’s efforts accordingly, and act as the primary point of contact for clients regarding security incidents, updates, and escalations.• Creation of biweekly, monthly reports, Cyber Threat Intelligence reports, and compliance metrics for SOC operations and presentation to the client.• Proficient in MITRE ATT & CK Framework, TTPs, APT groups, and Cyber Kill Chain for robust threat analysis. • Experience in integrating various log sources including servers, network devices, security appliances and Cyber Threat Intelligence feeds with SIEM and SOC platform.• Perform requirement gathering, License Management and devising best possible approach for onboarding new log sources into SIEM.• Experience in Incident Response, ensuring timely identification, analysis, and mitigation of security threats within the SLAs. Maintain and update incident response playbooks and ensure effective implementation.• Experience in Incident, Change & problem management, participate in post-incident reviews to identify gaps and improve the SIEM system• Strengthened data loss prevention via Symantec DLP & Microsoft Purview, crafting customized policies for safeguarding sensitive information. • Conducted Vulnerability assessments, delivering comprehensive reports with mitigation strategies.• Managed compliance with PCI -DSS, GDPR, HIPAA, ISO 27001, SOC2 ensuring data security and regulatory adherence. • Knowledge on Digital Forensics, Malware Analysis, utilizing automated malware analysis (Threat Grid, FireEye), and leveraging infrastructure security expertise.• Knowledge on SOAR, Azure Sentinel, MS Defender for cloud, and implementation of Microsoft Purview. • Manage RFPs, collaborate with sales & technical teams, contribute to detailed technical write-ups for RFP/RFI responses.

Experience

1. Senior Consultant

   EY

   May 2025 — Present · Kochi, IN

Education

• Triveni jr college,Suryapet

  Inter

  2004 — 2006

• Mits

  B.tech, Ece

  2006 — 2010

• St.Xaviers high school

  SSC

  2001 — 2004

Skills

• Arcsight
• Splunk
• Information Security
• Symantec Endpoint Protection
• Dlp
• Ids & Ips