# Anurag Vats

Anurag Vats is a remote worker on Himalayas, Co-founder and Academic Head at Indian Institute of Cyber Security and Digital Forensic (IIC, based in India.

Source: https://himalayas.app/@anuragvats

```text
SOC Analyst at Wormos who deployed Wazuh across 56 vessels and automated responses to cut manual triage by ~40%.
```

| Detail | Value |
| --- | --- |
| Availability | Open to opportunities |
| Location | India |
| Authorized to work in | India |
| Job categories | SOC Analyst, SIEM Engineer, Detection Engineer |
| Skills | Wazuh, SIEM, Security Operations Center (SOC), Alert Triage, Incident Response, Detection Engineering, MITRE ATT&CK, Detection Rule Development, Active Response, Suricata, Sysmon, YARA, VirusTotal API, File Integrity Monitoring, Digital Forensics |
| LinkedIn | https://linkedin.com/in/anurag-vats-16796a198 |

## About

```text
At Wormos, I deployed Wazuh from lab validation to production across 56 vessels and ~616 endpoints for Seaspan Corp. As the sole night-shift analyst, I responded to alerts and wrote active-response scripts that reduced manual triage workload by ~40%.

With Cyber Cell and Security Unit (CCSU), Bihar Police, I deployed Wazuh for ~134 endpoints and built ATT&CK-mapped detection kits, including FIM, YARA scanning, and VirusTotal hash lookups. I also co-founded Indian Institute of Cyber Security and Digital Forensic (IICSDF), where I lead SOC, digital forensics, and ethical hacking instruction.
```

## Experience

### Co-founder and Academic Head (current)

Indian Institute of Cyber Security and Digital Forensic (IIC. Dec 2025 - Present

```text
Lead curriculum and hands-on lab instruction in SOC operations, digital forensics, and ethical hacking. Published the IICSDF Wazuh Endpoint Toolkit with detection kits and guides.
```

Skills: SOC-Operations, Digital-Forensics, Ethical-Hacking, Wazuh, Curriculum-Development, Python

### Independent Security Consultant

Cyber Cell and Security Unit (CCSU), Bihar Police. Jun 2026 - Oct 2026

```text
Deployed a production Wazuh SIEM for ~134 endpoints with Sysmon, Suricata, and VirusTotal enrichment. Built a one-click PowerShell installer, integrated Suricata with Wazuh, and cut log volume ~1,000x.
```

Skills: Wazuh, SIEM, Sysmon, Suricata, Virus-Total, PowerShell, MITRE-ATT&CK, FIM, YARA, SCA, ISO-27001, Nmap

### SOC Analyst

Wormos. Mar 2025 - Nov 2025

```text
Deployed Wazuh SIEM from scratch across 56 vessels (~616 endpoints) and monitored 100+ alerts per night as sole night-shift analyst. Wrote active-response scripts that reduced manual triage workload by ~40%.
```

Skills: Wazuh, SIEM, Incident-Response, Active-Response, Virus-Total, Sysmon, FIM, YARA, ITSM, Dashboarding

### Cyber Forensic Investigator (Intern)

Cyber Cell, Economic Offence Unit (EOU), Bihar Police. Aug 2024 - Oct 2024

```text
Analyzed digital evidence in active cybercrime cases with FTK and XRY, including IPDR/CDR analysis, and traced fraud money transfers. Delivered training seminars on forensic investigation and evidence handling.
```

Skills: FTK-(Forensic-Toolkit), XRY, IPDR, CDR, Digital-Forensics, Evidence-Handling, Training

## Education

### National Forensic Sciences University

Certificate Course in Network Forensics, Network Forensics

```text
Completed a certificate course in Network Forensics in September 2026.
```

### EC-Council

Computer Hacking Forensic Investigator (CHFI), Digital Forensics

```text
Earned the Computer Hacking Forensic Investigator (CHFI) certification in May 2026.
```

### SRM Institute of Science and Technology

Bachelor of Technology, Computer Science (Cyber Security Specialization). 2020 - 2025

```text
Pursued a Bachelor of Technology in Computer Science with a specialization in Cyber Security, completing the program in 2025.
```

## Tech stack

- Python
- PowerShell
- Linux
- OpenSearch
- Nmap
- Bash
- Wazuh
- Suricata

To contact Anurag, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire).

## People also viewed

- [Mutyala Divya Lahari User](https://himalayas.app/@mutyaladivyalaharius): Senior Analyst – Cyber Security Operations, Deloitte USI
- [Jay Rathod](https://himalayas.app/@jayrathod1): Senior Cybersecurity Analyst, CyberionLabs Pvt. Ltd.
- [krishnendu bhattacharjee](https://himalayas.app/@krishnendubhattachar): DFIR Analyst, CyberDefenders
- [Sumit Kumar](https://himalayas.app/@sumitkumar63): Cybersecurity Intern, Amroha Police
- [Jeevan K O](https://himalayas.app/@jeevanko): Cyber Security Engineer, ISTRAC, ISRO, Government of India
- [Arush Mishra](https://himalayas.app/@arushmishra): SIEM in Cybersecurity, InternPro
- [Mokshita Chugh](https://himalayas.app/@mokshitachugh): SOC L1 Intern, SeccureOps
- [Sakshi Sawant](https://himalayas.app/@sakshisawant1): Project Engineer, CDAC Noida
- [Himanshu kumar](https://himalayas.app/@himanshukumar30): Security Engineer 1, PhysicsWallah Private Limited
- [Avneesh singh](https://himalayas.app/@avneeshsingh1): Summer Trainee, Solitaire Infosys Pvt. Ltd.