Looking for a job

Poonam Chandak

@poonamchandak

Message

I build and optimize Splunk and Microsoft security operations for incident response and threat monitoring.

India

Message

What I'm looking for

I'm looking for opportunities to build and optimize SIEM and security operations capabilities, improve incident response and automation, and strengthen threat monitoring, data protection, and security compliance.

I've spent 10+ years building security operations and SIEM capabilities across Proficio, HH Global, MSCI, and Sony India Software Centre. My work centers on investigating incidents, centralizing security telemetry, and improving the reliability of security monitoring.

At Proficio, I manage client Splunk incidents and help design, configure, maintain, and optimize Splunk infrastructure. I build dashboards, reports, alerts, data parsing, integrations, and architectures spanning indexers, search heads, deployment servers, and forwarders.

At HH Global, I investigated Microsoft Defender incidents, integrated Defender with Microsoft Sentinel, built automation for lower-severity alerts, and developed incident-response SOPs. I also performed phishing and malware analysis, supported Microsoft Purview DLP use cases, and contributed to third-party risk assessments and security audits.

Earlier, at MSCI and Sony India Software Centre, I administered Splunk Enterprise and Splunk Cloud environments, onboarded and parsed security data, developed SPL searches and monitoring dashboards, and supported endpoint security integrations. I also use PowerShell and shell scripting to automate checks, reporting, data retention, and operational tasks.

Experience

Work history, roles, and key accomplishments

Current

Senior Infrastructure Engineer III

Current

Proficio Pvt. Ltd.

Dec 2024 - Present (1 year 9 months)

Manage and troubleshoot client incidents related to Splunk, ensuring timely investigation and resolution of SIEM-related issues. Support clients in designing, configuring, maintaining, and optimizing their Splunk infrastructure.

Splunk SIEM Incident Management Dashboarding Alerts Data Parsing Syslog TCP UDP LDAP Performance Optimization Capacity Planning Indexer SearchHeads Deployment Server Forwarders

Senior Information Security Analyst

HH Global Pvt. Ltd.

Feb 2022 - Nov 2024 (2 years 9 months)

Managed and investigated security incidents reported through Microsoft Defender, performing technical analysis and supporting incident response activities. Analysed security incidents to identify threat vectors, indicators of compromise (IoCs), affected systems, and potential security impact.

Microsoft Defender Microsoft Sentinel Phishing Analysis Malware Analysis Third Party Risk Assessments Purview DLP Splunk Incident Management Security Operations IOC Analysis Connectors Azure Arc Data Collection Rules Automation Workflows OneTrust OnSecurity SOPs Risk Assessment Security Audits

Analyst — Splunk Administrator & Developer

MSCI Inc.

Sep 2018 - Jan 2022 (3 years 4 months)

Administered Splunk Indexer and Search Head Clusters, Search Head Pooling, and Single Instance architectures. Created and deployed Splunk applications using Deployment Server.

Software Engineer & Security Researcher

Sony India Software Centre Pvt. Ltd.

Aug 2015 - Aug 2018 (3 years)

Worked with Endpoint teams supporting McAfee security products and integrating endpoint security data into Splunk. Gathered requirements for endpoint security data and onboarded and parsed the data into Splunk.