Looking for a job

Harish Kandalam

@harishkandalam

Cybersecurity Operations leader at Ultraviolet Cyber who helped scale a global medical technology security operation to 140+ professionals.

India

Message

At Ultraviolet Cyber, I’ve grown with a cybersecurity engagement that expanded from an early SOC into a 140+ person operation. As Associate Director – Cybersecurity Operations, I lead the primary offshore teams supporting a global medical technology enterprise.

I lead an integrated portfolio of cybersecurity capabilities and guide security technology strategy and transformation. This includes implementations, migrations, and integrations across security platforms, as well as work on automation and AI-assisted security operations.

I partner with customer CIO, CISO, and cybersecurity leaders on operational performance, major security events, and transformation. I also lead business governance and contribute to service expansion, RFPs, and opportunities that supported more than $2M in engagement revenue growth over the last two years.

Earlier, as Manager – Incident Response & Run Operations, I led major incident response as Incident Commander and applied NIST and MITRE ATT&CK principles to operational practices. I began as a SOC Analyst, progressing through hands-on monitoring, investigation, and response into technical, team, and service leadership.

Experience

Work history, roles, and key accomplishments

Current

Associate Director – Cybersecurity Operations

Current

Ultraviolet Cyber

Apr 2024 - Present (2 years 5 months)

Leads offshore cybersecurity team for a global medical technology enterprise, scaling team from 96 to 140+ professionals and managing 20+ cybersecurity capabilities. Drives technology strategy, executive governance, and commercial growth.

SIEM EDR Email Security Endpoint management Network Security Vulnerability Management SOAR Attack Surface Management AI Assisted Security Incident Response Threat Intelligence Cloud Security Offensive Security Risk Management Security Engineering Automation

Manager – Incident Response & Run Operations

Ultraviolet Cyber

Feb 2021 - Apr 2024 (3 years 2 months)

Led incident response and security technology operations, serving as Incident Commander for major incidents and applying NIST and MITRE ATT&CK principles. Managed security technology implementations and migrations, and supported service expansion.

Incident Response Security Technology Management NIST MITRE ATT&CK Carbon Black Tanium ProofPoint MDE DCS SecureOne XSOAR ISO 27001 HIPAA GDPR

Team Lead – Cybersecurity Fusion Center

Ultraviolet Cyber

Oct 2017 - Feb 2021 (3 years 4 months)

Led a multidisciplinary team of 15 professionals across incident response, security technology, cyber risk, threat intelligence, and red teaming. Drove development of playbooks, SOPs, metrics, and SLAs, and supported major security technology deployments.

Zscaler QRadar ProofPoint Carbon Black Tanium Incident Response Security Technology Management Cyber Risk Threat Intelligence Red Teaming Playbooks SOPs KPIs SLA

Senior SOC Analyst

Ultraviolet Cyber

Sep 2015 - Oct 2017 (2 years 1 month)

Performed advanced investigation, containment, and response, and managed security technologies including SIEM, endpoint, email, and network security platforms. Supported tuning and operational activities for QRadar, McAfee EDR, Carbon Black, and Proofpoint.

SIEM QRadar McAfee EDR Carbon Black ProofPoint incident investigation Containment Detection Tuning Security Technology Management

SOC Analyst – L1

Ultraviolet Cyber

Feb 2013 - Sep 2015 (2 years 7 months)

Started career in frontline security operations, performing alert monitoring, initial triage, investigation, evidence gathering, and escalation. Built foundation in enterprise security technologies and incident workflows.

Monitoring And Alerting Triage Investigation Evidence gathering Escalation Management Security Operations