Looking for a job

Sanjay Kumar

@itzsanjaykumar

Message

Cybersecurity consultant specializing in SIEM and detection engineering.

India

Message

What I'm looking for

I seek roles where I can lead SIEM/detection engineering, reduce noise and costs, and build automated SOC playbooks while growing in cloud and DFIR responsibilities within a collaborative, security-driven team.

I am a cybersecurity consultant focused on SIEM and detection engineering, with hands-on experience implementing Google SecOps (Chronicle), Microsoft Sentinel, and Elastic SIEM across enterprise environments.

I design MITRE ATT&CK-aligned detection use cases, create automated SOC playbooks, and lead end-to-end detection engineering activities including retro-hunting, simulated attack validation, and continuous tuning.

I have reduced SIEM ingestion costs through advanced log filtering and selective source onboarding, and improved alert fidelity by tuning rules and suppressing low-confidence duplicates to reduce analyst fatigue.

I also have experience in DFIR, cloud security hardening (AWS, Azure), creating client-facing PoCs/SOWs, and collaborating with law enforcement for forensic investigations—always prioritizing measurable improvements in detection and operational efficiency.

Experience

Work history, roles, and key accomplishments

Current

Cybersecurity Consultant

Current

Rockladder

Sep 2025 - Present (5 months)

Implemented Google SecOps (Chronicle) for a 2000+ user enterprise, integrated multiple telemetry sources, and deployed automated SOC playbooks that improved alert enrichment and reduced analyst fatigue through prioritization and suppression.

SIEM Engineering Detection Engineering Alert Tuning Integration (EDR Cloud Jira)

Cybersecurity Analyst – L2

Cywarden Global Services

Aug 2024 - Sep 2025 (1 year 1 month)

Developed and fine-tuned 300+ SIEM detection rules aligned with MITRE ATT&CK, conducted alert investigations and RCA, and hardened AWS environments using CIS benchmarks to improve threat visibility and reduce false positives.

Detection Rule Development Root Cause Analysis SIEM Incident Response

Digital Forensic Analyst

Heritage Cyberworld LLP

Feb 2024 - Jun 2024 (4 months)

Performed forensic imaging and analysis for high-impact investigations, maintained chain of custody with law enforcement partners, and produced detailed forensic reports ensuring legal admissibility.

Digital Forensics Chain Of Custody Wireshark Legal & Compliance