Looking for a job

Azaz Ahmad

@azazahmad1

Cyber Security Consultant at Atos supporting Nomura SOC operations and developing detection rules, incident workflows, and analyst runbooks.

India

Message

At Atos, I support SOC operations for Project: Nomura across SIEM, endpoint, email, and network security tools. I handle alert investigation and response, and I’m building standardized incident workflows, checklists, and analyst runbooks.

Previously, as Cyber Security Lead at NAB India, I led SOC monitoring and incident response and analyzed alerts using QRadar and CrowdStrike. I also produced threat intelligence reports and investigated phishing campaigns, counterfeit domains, and other brand misuse.

At TCS, Mumbai, I investigated security alerts and incidents across endpoint, firewall, server, and email environments, and supported CSIRT functions during high-severity incidents. Earlier, at ACSG, I conducted open-source investigations and monitored emerging cyber threats.

Experience

Work history, roles, and key accomplishments

Current

Cyber Security Consultant (L3)

Current

Atos

Dec 2025 - Present (10 months)

Supporting enterprise SOC operations across SIEM, EDR, XDR, email security, and network security tools. Building SOPs, investigation workflows, and incident handling checklists, and mentoring analysts on triage quality and incident documentation.

SIEM EDR XDR Email Security Network Security Incident Response Threat Hunting MITRE ATT&CK SOP Development Mentorship

Cyber Security Lead

NAB India

Feb 2024 - Nov 2025 (1 year 9 months)

Led end-to-end SOC monitoring and incident response across SIEM, EDR, XDR, cloud, and network security tools. Conducted threat intelligence analysis and produced tactical, operational, and strategic reports for SOC and executive stakeholders.

QRadar Crowdstrike Threat Intelligence OSINT Darknet MITRE ATT&CK Diamond Model Cyber Kill Chain Incident Response Brand Protection

Cyber Security Lead

TCS

Jun 2022 - Feb 2024 (1 year 8 months)

Performed deep-dive analysis of security alerts using SIEM, EDR, and XDR technologies. Investigated incidents across endpoint, firewall, server, IDS/IPS, CASB, UEBA, and email environments, and supported CSIRT functions during high-severity incidents.

QRadar Crowdstrike SIEM EDR XDR Incident Response Threat Intelligence CSIRT運用 Event Correlation Triage

Security Analyst

ACSG

Dec 2017 - May 2022 (4 years 5 months)

Conducted open-source investigations and managed cyber threat intelligence related to cybersecurity and geopolitics. Monitored emerging threats and delivered security awareness training on phishing, data protection, and social engineering.

OSINT Threat Intelligence Security Analytics Incident Detection Security Awareness Training Cyber Hygiene

GTCS Analyst

Aegis Pvt. Ltd.

Sep 2016 - Dec 2017 (1 year 3 months)

Analyzed operational issues and resolutions using Salesforce and support tools to reduce operational cost and meet SLA targets. Supported onboarding and training of new team members and identified process improvement opportunities.

Salesforce Support Tools SLA Management Process Improvement Training