Open to opportunities

Ayush Thakur

@ayushthakur4

Message

Security Analyst focused on SOC monitoring, SIEM operations, and threat investigation.

India

Message

What I'm looking for

I’m looking for a SOC-focused role where I can run alert triage and log correlation daily, improve detection engineering (SIEM/NIDS), and handle incident investigations—while growing in threat detection workflows and multi-vendor security operations.

I’m a Security Analyst with hands-on experience in SOC monitoring, SIEM operations, and building security-focused solutions through practical projects, internships, and cybersecurity challenges. I enjoy analyzing security alerts, investigating incidents, and escalating threats with a practical, alert-to-action mindset.

In my Infotact Solutions internship, I deployed a Snort-based NIDS in a lab (Ubuntu Server + Kali Linux) and wrote 8 custom rules to detect ICMP probes, Nmap scans, SSH/FTP brute-force attempts, and HTTP-based C2 beaconing. I validated the detections by simulating live attacks and confirmed results through Snort alerts and logs, then documented the work in a formal report and presentation.

I also built security engineering capability through my Cyber Secured India internship, assessing Android app vulnerabilities with CWE mapping and remediation steps, and performing black-box testing using ADB and Logcat alongside source review. On the projects side, I created a SOC platform integrating Nmap and OWASP ZAP with the NVD API for automated CVE enrichment, and implemented JWT authentication with 3-tier RBAC (Admin/Analyst/Viewer) to support audit-ready reporting mapped to NIST 800-53 and ISO 27001.

Experience

Work history, roles, and key accomplishments

Security Admin Associate (L1)

Infotact Solutions

Aug 2025 - Nov 2025 (3 months)

Deployed a Snort-based NIDS lab (Ubuntu Server + Kali Linux) and wrote custom rules to detect ICMP probes, Nmap scans, SSH/FTP brute-force attempts, and HTTP-based C2 beaconing. Validated detections by simulating attacks with Nmap, Hydra, and curl, and documented the approach in a report and presentation.

Snort ICMP Probe Detection Nmap Hydra CURL SSH Brute Force Detection FTP Brute Force Detection HTTP C2 Beacon Detection Linux Kali

Cyber Security & Forensics Intern

Cyber Secured India

Sep 2024 - Nov 2024 (2 months)

Assessed vulnerabilities in the DIVA Android app with CWE mapping and remediation steps, and performed black-box testing using ADB, Logcat, and source review. Identified issues including SQL injection (CWE-89) and improper access control.

Vulnerability Assessment CWE Mapping Black Box Testing ADB Android Logcat SQL Injection Access Control

AI/ML-Assisted NIDS

GitHub

Contributed to a faculty-guided ML-based NIDS project trained on the UNSW-NB15 dataset. Built a Flask dashboard for real-time traffic monitoring and alert visualization, and integrated Gemini AI to generate natural-language threat summaries from detection logs.

ML Based NIDS UNSW NB15 Dataset Flask Real Time Traffic Monitoring Gemini AI Threat Summary Generation Detection Log Summarization

PurpleOps – SOC & Vulnerability Platform

GitHub

Built a SOC and vulnerability platform with basic vulnerability scanning that integrates Nmap and OWASP ZAP with the NVD API for automated CVE enrichment. Implemented JWT authentication and a 3-tier RBAC model (Admin/Analyst/Viewer) and mapped scan findings to NIST 800-53 and ISO 27001 controls for compliance reporting.