# Himanshu kumar

Himanshu kumar is a remote worker on Himalayas, Security Engineer 1 at PhysicsWallah Private Limited, based in India.

Source: https://himalayas.app/@himanshukumar30

```text
Security Engineer 1 at PhysicsWallah, running production Wazuh SIEM and building detection rules across integrated log sources.
```

| Detail | Value |
| --- | --- |
| Availability | Open to opportunities |
| Location | India |
| Authorized to work in | India |
| Salary expectations | 76k+ USD |
| Job categories | SOC Analyst, Detection Engineer |
| Skills | SOC Operations, Security Information And Event Management (SIEM), Detection Engineering, Alert Triage, incident investigation, Incident Response, Digital Forensics and Incident Response (DFIR), Threat Hunting, Wazuh, CrowdStrike Falcon Cloud Security, Splunk, Python, MITRE ATT&CK, Cyber Kill Chain, SOAR |

## About

```text
At PhysicsWallah Private Limited, I run Wazuh SIEM in production with 8+ integrations and write custom detection rules for integrated log sources. I also resolved 10,000+ CloudSEK and CrowdStrike Falcon incidents, and triaged 1,700+ alerts.

I designed a CrowdStrike Falcon Fusion SOAR workflow to cut alert fatigue and am building an AI SOC analyst to automate alert triage. I also found a BOLA and client-side authorization bypass and wrote a VAPT report with CVSS scoring.

Earlier, at Codec Networks Pvt. Ltd., I monitored SOC alerts and conducted DFIR triage and IOC hunting. At National Cyber Forensic Laboratory / IFSO, Delhi Police, I automated Python reporting workflows, cutting analysis time by about 60%; my projects include a production Wazuh ingestion framework and an automated phishing analysis pipeline.
```

## Experience

### Security Engineer 1 (current)

PhysicsWallah Private Limited. Jan 2026 - Present

```text
Resolved 10,000+ CloudSEK and CrowdStrike Falcon incidents end to end, including takedowns and investigations. Triaged 1,700+ alerts and led 8 incident investigations in CrowdStrike Falcon.
```

Skills: CloudSEK, CrowdStrike-Falcon-Cloud-Security, Wazuh, SIEM, Detection-Engineering, SOAR, Python, Cyber-Kill-Chain, MITRE-ATT&CK, IOC-Enrichment, VAPT, CVSS, OpenSearch, AWS, Microsoft-Entra-ID, FortiGate, Email-Security, Phishing-Analysis

### Information Security Intern

Codec Networks Pvt. Ltd.. Nov 2025 - Jan 2026

```text
Monitored SOC alerts in Wazuh and Splunk; used Wireshark and PCAP analysis to detect intrusions, Trojans and ransomware. Ran DFIR triage and IOC hunting across Cyber Kill Chain stages; wrote remediation reports for client security teams.
```

Skills: Wazuh, Splunk, Wireshark, PCAP, DFIR, IOC-Hunting, Cyber-Kill-Chain, Incident-Response

### Digital Forensic Research Intern

National Cyber Forensic Laboratory / IFSO, Delhi Police. Jan 2025 - May 2025

```text
Extracted and correlated evidence across Windows and Linux with FTK Imager, Autopsy and EnCase. Automated Python reporting workflows, cutting analysis time by about 60%.
```

Skills: FTK-Imager, Autopsy, Encase, Digital-Forensics, Python, Windows-Forensic-Investigation, Linux-Forensics

## Education

### National Forensic Sciences University (NFSU)

Master of Science, Cyber Forensics. 2024 - Present

```text
Pursuing a Master of Science in Cyber Forensics from July 2024 to May 2026.
```

### National Forensic Sciences University (NFSU)

Bachelor of Science, Forensic Science

```text
Bachelor of Science in Forensic Science with a focus on Cyber Forensics.
```

## Tech stack

- Splunk
- Python
- Graylog
- AWS CloudTrail
- Wireshark
- OpenSearch
- AWS WAF
- SQL
- Bash
- N8N
- Wazuh
- VirusTotal
- Microsoft Sentinel

To contact Himanshu, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire).

## People also viewed

- [Piyush Benia](https://himalayas.app/@piyushbenia): Detection Specialist, Cumulus Systems Pvt Ltd
- [Karmanya Tyagi](https://himalayas.app/@karmanyatyagi): Software Engineer Intern, Optum
- [indrajit jeeva](https://himalayas.app/@indrajitjeeva): Security Analyst, M2P Fintech
- [Digvijay Singh](https://himalayas.app/@digvijaysingh3): Threat Hunter, Network Techlab India Ltd (NTIPL)
- [TANMAY KUDALE](https://himalayas.app/@tanmaykudale): Security Analyst Intern, Lentra AI
- [krishnendu bhattacharjee](https://himalayas.app/@krishnendubhattachar): DFIR Analyst, CyberDefenders
- [REHAN User](https://himalayas.app/@rehanuser7): Cyber Security Intern, Cisco
- [Jeevan K O](https://himalayas.app/@jeevanko): Cyber Security Engineer, ISTRAC, ISRO, Government of India
- [Nagarajan T](https://himalayas.app/@nagarajant): Security Engineer – SecOps (L2/L3), Zoho Corporation
- [Anurag Vats](https://himalayas.app/@anuragvats): Co founder and Academic Head, Indian Institute of Cyber Security and Digital Forensic (IIC