Open to opportunities

chirag arora

@chiragarora1

Message

I investigate, contain, and remediate enterprise cybersecurity incidents across SIEM, EDR, and PAM.

India

Message

What I'm looking for

I'm looking to continue leading security incident investigations and SOC operations, with opportunities to deepen my work in SIEM, EDR/XDR, PAM, threat analysis, and enterprise security operations.

At Capgemini Technology Services Ltd., I lead incident investigations across SIEM and EDR tools, performing root-cause and impact analysis, log correlation, and threat analysis to identify true positives and reduce false positives.

I've supported 24/7 SOC operations using Microsoft Defender XDR, Microsoft Sentinel, ServiceNow, and endpoint security tools. My work includes triaging alerts, analyzing endpoint threats and IOCs, escalating confirmed threats, documenting remediation, and maintaining 95%+ SLA compliance.

I also lead PAM operations for UK-based high-availability infrastructure using Thycotic Secret Server, with experience across IAM, ITSM, vulnerability management, email security, and compliance support.

Experience

Work history, roles, and key accomplishments

Current

Senior Analyst

Current

Capgemini Technology Services Ltd.

Apr 2025 - Present (1 year 4 months)

Lead incident investigations including root cause and impact analysis across SIEM and EDR tools. Perform log correlation and threat analysis to identify true positives and minimize false positives.

Incident Response Security Monitoring EDR XDR SIEM Log Analysis Threat Investigation ServiceNow PAM Vulnerability Management Email Security Threat Intelligence

Analyst

Capgemini Technology Services Ltd.

Jul 2022 - Mar 2025 (2 years 8 months)

Monitor and triage security alerts using Microsoft Defender XDR. Perform initial analysis of SIEM logs and suspicious activities, and support incident response and escalation.

Security Operations SIEM Microsoft Defender ServiceNow Incident Response Threat Intelligence