Open to opportunities

Danish Mahmood

@danishmahmood

Message

I investigate enterprise threats, lead NIST-aligned incident response, and improve SIEM detection fidelity.

India

Message

What I'm looking for

I'm looking to continue contributing to security operations, incident response, threat hunting, and SIEM detection engineering in an enterprise environment.

At ProcessIT Global, I perform real-time alert triage, log correlation, and threat investigations across Wazuh, ELK, Splunk ES, Microsoft Sentinel, and IBM QRadar.

I lead L2 incident handling aligned with NIST SP 800-61, guiding containment, eradication, and root-cause analysis for critical events. I also hunt endpoint threats across Windows and Linux/UNIX systems, using Sysmon and EDR telemetry to identify persistence and lateral movement.

Previously at SEQURETEK, I supported L1/L2 security operations through deep packet analysis, network troubleshooting, vulnerability assessments, and technical risk reviews across firewall, IDS/IPS, and NAC environments.

I've fine-tuned SIEM rules and log decoders across ELK, Wazuh, and Splunk to reduce alert noise by over 25%, while translating threat intelligence and operational metrics into actionable risk briefings for leadership.

Experience

Work history, roles, and key accomplishments

Current

SOC Analyst / Security Specialist

Current

ProcessIT Global

Jul 2025 - Present (1 year 1 month)

Performs real-time SIEM alert triage, log correlation, and threat investigation across multiple SIEM platforms. Leads L2 incident handling and end-to-end incident response lifecycles aligned with NIST SP 800-61.