Open to opportunities

Anurag Vats

@anuragvats

Message

SOC Analyst at Wormos who deployed Wazuh across 56 vessels and automated responses to cut manual triage by ~40%.

India

Message

At Wormos, I deployed Wazuh from lab validation to production across 56 vessels and ~616 endpoints for Seaspan Corp. As the sole night-shift analyst, I responded to alerts and wrote active-response scripts that reduced manual triage workload by ~40%.

With Cyber Cell and Security Unit (CCSU), Bihar Police, I deployed Wazuh for ~134 endpoints and built ATT&CK-mapped detection kits, including FIM, YARA scanning, and VirusTotal hash lookups. I also co-founded Indian Institute of Cyber Security and Digital Forensic (IICSDF), where I lead SOC, digital forensics, and ethical hacking instruction.

Experience

Work history, roles, and key accomplishments

Current

Co-founder and Academic Head

Current

Indian Institute of Cyber Security and Digital Forensic (IIC

Dec 2025 - Present (11 months)

Lead curriculum and hands-on lab instruction in SOC operations, digital forensics, and ethical hacking. Published the IICSDF Wazuh Endpoint Toolkit with detection kits and guides.

SOC Operations Digital Forensics Ethical Hacking Wazuh Curriculum Development Python

Independent Security Consultant

Cyber Cell and Security Unit (CCSU), Bihar Police

Jun 2026 - Oct 2026 (4 months)

Deployed a production Wazuh SIEM for ~134 endpoints with Sysmon, Suricata, and VirusTotal enrichment. Built a one-click PowerShell installer, integrated Suricata with Wazuh, and cut log volume ~1,000x.

Wazuh SIEM Sysmon Suricata Virus Total PowerShell MITRE ATT&CK FIM YARA SCA ISO 27001 Nmap

SOC Analyst

Wormos

Mar 2025 - Nov 2025 (8 months)

Deployed Wazuh SIEM from scratch across 56 vessels (~616 endpoints) and monitored 100+ alerts per night as sole night-shift analyst. Wrote active-response scripts that reduced manual triage workload by ~40%.

Wazuh SIEM Incident Response Active Response Virus Total Sysmon FIM YARA ITSM Dashboarding

Cyber Forensic Investigator (Intern)

Cyber Cell, Economic Offence Unit (EOU), Bihar Police

Aug 2024 - Oct 2024 (2 months)

Analyzed digital evidence in active cybercrime cases with FTK and XRY, including IPDR/CDR analysis, and traced fraud money transfers. Delivered training seminars on forensic investigation and evidence handling.

FTK (Forensic Toolkit)XRY IPDR CDR Digital Forensics Evidence Handling Training