Looking for a job

mihir semwal

@mihirsemwal

Message

Incident Response Lead at DoT’s T-CSIRT, responding to APT intrusions targeting telecom infrastructure.

India

Message

At the Department of Telecommunication’s T-CSIRT, I manage incident response for critical telecom infrastructure and coordinate with national cybersecurity bodies. I analyzed more than 80 incident reports and led response to state-sponsored APT intrusion attempts, from IOC and TTP analysis through containment.

At Bank of America, I led response to high-severity incidents and built a vendor threat response framework. Earlier, I investigated potential insider threat cases and tuned DLP policies to reduce data exfiltration risk and false positives.

Experience

Work history, roles, and key accomplishments

Current

Lead Analyst – Telecom Cyber Security Incident Response Team (T-CSIRT)

Current

Amantaya Technologies

Mar 2026 - Present (8 months)

Manage cyber incident response of critical telecom infrastructure in liaison with apex national cybersecurity bodies, leading national-level threat monitoring and escalation workflows. Managed 80+ Action Taken Reports and flagged state-sponsored APT intrusion attempts.

Incident Response Threat Monitoring DDoS Command And Control (C2)Malicious Domains Port Scanning APT IOC TTP RCA MBSS Security Awareness Training

Info Security Analyst I – Cyber Incident Response and Management [SOC L2]

Bank of America

Mar 2024 - Mar 2026 (2 years)

Facilitated in-depth cyber investigations and incident response actions addressing diverse attack vectors. Managed APAC/EMEA cybersecurity operations, leading containment for 20+ high-severity incidents and building vendor threat response framework.

Incident Response DDoS Malware Analysis Insider Threat Vendor Breach MTTD MTTC MTTR Tabletop Exercises Data Protection Regulatory Compliance

Senior Tech Associate – Data Loss Prevention [SOC L1]

Bank of America

Jun 2022 - Feb 2024 (1 year 8 months)

Monitored enterprise-wide DLP strategies to protect sensitive data across endpoints, network file shares, email and web services. Investigated 500+ potential insider threat cases and facilitated DLP policy fine tuning.