Vikash S.

About Vikash S.

Experienced in monitoring, detecting, and responding to security incidents. Proficient in SIEM, threat analysis.ExperienceAnalyst | HCL Technologies | February 2024 - May 2025- Supervised SOC L1 analysts in evaluating and escalating security alerts, streamlining processes, and refining procedures in line with industry standards- Collaborated with SIEM engineering teams to create and enrich detection content according to MITRE ATT & CK and Cyber Kill Chain frameworks, mitigating any deficiencies in detection solutions- Assessed and optimized deployed SIEM rules, filters, and use cases to minimize false positives and enhance detection precision- Conducted proactive threat hunts utilizing SIEM and EDR tools- Produced weekly and monthly reports on security incidents, facilitated team knowledge transfer sessions, and delivered continuous training to analysts on emerging tools and technologies- Analyzed security events, classified them, and fulfilled ad-hoc client requests, including contributing to internal investigations and forensic analysis to enhance detection effectiveness and minimize false positives.GET | HCL Technologies | September 2023 - January 2024- Monitored security events and alerts in real time through SIEM dashboards, ensuring timely detection of suspicious activities- Performed initial triage of security incidents by analyzing logs, correlating alerts, and assessing severity before escalation to L2 analysts- Investigated endpoint, network, and email alerts to identify potential threats such as phishing, malware, and policy violations- Documented incident details, investigation steps, and escalation actions in the SOC ticketing system for audit and tracking purposes- Learned and applied SOC processes based on MITRE ATT & CK, Cyber Kill Chain, and incident response best practices- Collaborated with senior analysts during security incidents and participated in shift handover briefings to maintain operational continuity.Technical Skills-SOC Monitoring & Incident Response (IR)-Threat Hunting & Incident Handling-SIEM (Splunk) – Rule Creation & Tuning-Log Analysis & Correlation (MITRE ATT & CK, Cyber Kill Chain)-Endpoint Detection & Response (EDR)-Malware & Phishing Analysis-Microsoft Defender, Wireshark, Process Monitor-Cloud Security Basics (Azure Fundamentals – AZ-900)-ITIL Foundation Certified

Experience

1. Senior Associate

   Coforge

   Mar 2026 — Present · Noida, IN

   Lead advanced monitoring and investigation of security alerts across SIEM and EDR platforms (Microsoft Defender, CrowdStrike, Splunk, Microsoft Sentinel) within a 24x7 SOC environment.* Perform in-depth alert triage, event correlation, impact assessment, and incident classification aligned with ITIL-based incident response lifecycle and SLA commitments.* Investigate high-severity security incidents including phishing campaigns, malware infections, suspicious authentications, brute-force attempts, and endpoint compromise scenarios.* Conduct proactive threat hunting using MITRE ATT & CK and Cyber Kill Chain frameworks to detect advanced and persistent threats.* Tune and optimize SIEM detection rules, use cases, and alert thresholds to reduce false positives and enhance detection accuracy.* Perform detailed log analysis across Windows security logs, endpoint telemetry, authentication events, email security logs, and Azure cloud identity platforms.* Drive root cause analysis (RCA) for recurring incidents and provide actionable remediation recommendations to infrastructure and application teams.* Collaborate with SOC engineering and cross-functional teams to close monitoring gaps and strengthen enterprise security posture.* Maintain audit-ready documentation, compliance alignment, and high SLA adherence in client-facing environments.

Education

• UNITED COLLEGE OF ENGINEERING AND RESEARCH, PRAYAGRAJ

  Bachelor of Technology - BTech, Information Technology

• Sant Atulanand Convent School

  10+2, PCM

• Sunbeam Varuna

  High School, PCM