Paranjay Singh

I’m a Cybersecurity Analyst focused on SOC operations, threat detection, and incident response. I’ve independently built and operated 20+ SOC and detection-engineering projects spanning SIEM engineering, threat detection, incident response, endpoint monitoring, and attack emulation.

My work is grounded in practical adversary simulation and strong detection engineering. I simulate and detect real attack techniques mapped to MITRE ATT&CK (including credential dumping and brute-force such as T1003) and automate security operations with Python and Bash tooling.

I build detections end-to-end by validating telemetry and tuning logic against real event data. For example, I designed multi-host SOC labs with Splunk, Wazuh, and Sysmon, executed controlled credential-dumping scenarios, and used Atomic Red Team to generate authenticated-attack telemetry for SIEM detection validation.

I also strengthen visibility by improving endpoint telemetry and centralized log collection. I configured advanced Sysmon rules and Splunk Universal Forwarder setups to ensure consistent Windows event ingestion, and I complement my technical practice with disciplined, customer-facing operational experience from running a digital services outlet.