Open to opportunities

Narender Kanchi

@narenderkanchi

Message

Cybersecurity professional specializing in SOC operations, SIEM, and incident response.

United States

Message

What I'm looking for

I seek a senior SOC or security operations role where I can lead incident response, improve detection via SIEM/EDR, automate workflows, and strengthen cloud and endpoint security in a collaborative environment.

I am a cybersecurity professional with over eight years of hands-on experience in SOC operations, SIEM management, and enterprise incident response. I have a proven record of reducing MTTD/MTTR by optimizing playbooks, fine-tuning SIEM rules, and automating workflows.

I have managed and configured SIEM and EDR platforms including Splunk, HP ArcSight, Microsoft Sentinel, QRadar, CrowdStrike, and Microsoft Defender, and mitigated high-severity threats across thousands of endpoints. I have strengthened email security, prevented data exfiltration through DLP monitoring, and secured CI/CD pipelines and containerized applications.

I apply frameworks such as MITRE ATT&CK, NIST 800-53, ISO 27001, and SOX to drive compliance and risk reduction, and I build automation and AI/ML-driven detection solutions to improve SOC efficiency and threat visibility.

Experience

Work history, roles, and key accomplishments

Current

Consultant Information Cyber Security Analyst

Current

BNP Paribas

Oct 2022 - Present (2 years 11 months)

Managed global SIEM operations and SOC monitoring, reducing risk via privileged access reviews and applying Cyber Kill Chain techniques to detect and mitigate APTs across environments.

Azure Sentinel Microsoft Defender Crowdstrike Log Analysis Incident Response PowerShell

Cyber Security Associate

Zalaris

May 2019 - Oct 2022 (3 years 5 months)

Operated 24x7 SOC monitoring using Splunk and QRadar, performed second-level incident analysis, reduced toil through scripting, and coordinated root cause and client-facing incident reports.

Splunk QRadar Cisco ASA Microsoft Defender PowerShell BASH Threat Intelligence ServiceNow

Cyber Security Analyst

Daicenet Solutions Pvt Ltd

Mar 2017 - May 2019 (2 years 2 months)

Monitored SIEM and DLP systems, performed second-level incident analysis and RCA, and optimized Splunk queries and dashboards to improve detection and reporting.