Looking for a job

Apar Kaushik

@aparkaushik

Cyber security analyst specializing in SOC detection, incident response, and alert tuning across endpoint, identity, network, and email.

India

Message

What I'm looking for

I want to work in SOC and detection roles where I can triage and validate true positives, tune detections to reduce alert noise, enrich investigations with OSINT, and lead high-severity incident response with strong playbooks and collaboration.

I’m a cyber security analyst with 3+ years of experience in SOC operations, incident response, and threat detection across endpoint, identity, network, and email security. I focus on identifying true positives, reducing alert noise, and improving detection quality through deep-dive triage and investigation workflows.

In my current role, I perform advanced alert triage and escalations using Palo Alto XSIAM across endpoint, network, and cloud environments. I validate true positives, identify complex attack patterns, review L1/L2 investigations to close gaps, and support incident handling from analysis to closure with evidence-driven decisions.

Previously at HCLTech, I investigated and triaged 100+ security incidents per month and ran user-account compromise investigations using Azure AD and Microsoft 365 Defender. I analyzed phishing and advanced email threats with Proofpoint, enriched investigations using OSINT and Recorded Future, and improved detection accuracy by tuning Cloudflare WAF and Fortinet firewall rules—while managing incidents end-to-end in ServiceNow with proper RCA documentation and SLA adherence.

Experience

Work history, roles, and key accomplishments

Current

Associate Consultant - CSIRT

Current

Infosys

Jan 2026 - Present (5 months)

Performed advanced alert triage and deep-dive investigations in Palo Alto XSIAM across endpoint, network, and cloud environments, validating true positives and improving detection accuracy. Supported escalated incident handling through correlation, RCA-informed tuning, and incident response playbook adherence.

Incident Response Threat Detection Log Analysis Threat Hunting Correlation & RCA Detection Tuning

Cyber Security Analyst

Hcltech

May 2023 - Jan 2026 (2 years 8 months)

Investigated and triaged 100+ security incidents per month across identity, endpoint, network, and email security, conducting user-account compromise investigations with Azure AD and Microsoft 365 Defender. Analyzed phishing and advanced email threats using Proofpoint, enriched cases with OSINT/Recorded Future, and tuned Cloudflare WAF and Fortinet firewall rules to reduce false positives.

Triage Azure AD Microsoft 365 Defender Identity Protection OSINT Recorded Future Cloudflare WAF Fortinet ServiceNow

Network Analyst

Collabera Digital

Nov 2022 - May 2023 (6 months)

Monitored servers, firewalls, and network infrastructure using LogicMonitor, Nimsoft, SolarWinds, and Moogsoft. Performed Wintel troubleshooting for CPU, memory, and disk issues and supported P1 escalations with timely resolution of critical incidents.

LogicMonitor Solarwinds Moogsoft Network Monitoring Firewall Monitoring Incident Escalation P1 P2 Handling