# Sachin Bisht Sachin Bisht is a remote worker on Himalayas, Associate, Managed Detection & Response (MDR) at Ankura Consulting India Pvt. Ltd., based in India. Source: https://himalayas.app/@sachinbisht1 ```text Security Operations Engineer at Ankura Consulting India Pvt. Ltd., handling L2 incident escalations and refining SIEM alerts. ``` | Detail | Value | | --- | --- | | Availability | Looking for a job | | Location | India | | Authorized to work in | India | | Salary expectations | 1847k+ INR | | Job categories | Security Operations Engineer, Incident Response Analyst, Threat Hunter, Vulnerability Management Analyst | | Skills | SOC Operations, Incident Response, Incident Triage, Threat Hunting, Incident Remediation, Root Cause Analysis, MITRE ATTCK Framework, Security Information And Event Management (SIEM), Endpoint Detection and Response (EDR), Vulnerability Management, Third Party Risk Assessments, Security Compliance, NIST Cybersecurity Framework, Alert Tuning | | LinkedIn | https://linkedin.com/in/sachinbish | ## About ```text At Ankura Consulting India Pvt. Ltd., I handle L2 escalations in a 24/7 SOC environment, investigating high-priority incidents escalated by L1 analysts. I also mentor analysts on investigation method, creating SOPs and playbook creation/execution. I monitor Azure Sentinel and Obsidian alerts, including UEBA, DLP violations, sign-in anomalies, and business email compromise. I work with detection engineering teams to provide feedback on noisy alerts and help fine-tune SIEM rules. Previously, at Nokia, I investigated security incidents across endpoint, network, and identity vectors and hunted for indicators of compromise using enterprise log sources. At Real Time Data Services Pvt. Ltd., I supported compliance and risk governance, security opreations, incident response, security engineering and worked on vulnerability management with Nessus. ``` ## Experience ### Associate, Managed Detection & Response (MDR) (current) Ankura Consulting India Pvt. Ltd.. May 2025 - Present ```text Serve as the primary L2 escalation point in a 24/7 rotational shift environment, owning end-to-end investigations for high-priority incidents and mentoring Tier-1 analysts. Monitor and investigate security alerts within Azure Sentinel, specializing in UEBA, DLP, sign-in anomalies, and BEC, while administering SentinelOne and Carbon Black EDR platforms. ``` Skills: Azure-Sentinel, UEBA, DLP, Business-Email-Compromise-(BEC), Obsidian, SentinelOne, Carbon-Black, ServiceNow, Incident-Response, Tier-2-escalation, Mentorship, Root-Cause-Analysis, Email-Security, Microsoft-Defender-for-Office-365 ### Security Operations Engineer [Nokia](https://himalayas.app/companies/nokia). Mar 2024 - May 2025 ```text Acted as an L2 escalation handler for L1 analysts, independently investigating and resolving moderate-to-complex security incidents across endpoint, network, and identity vectors. Monitored and correlated security events across Splunk SIEM, CrowdStrike Falcon, and SentinelOne EDR platforms, and proactively hunted for indicators of compromise and adversary TTPs. ``` Skills: Splunk, CrowdStrike-Falcon-Cloud-Security, SentinelOne, Threat-Hunting, MITRE-ATT&CK, Incident-Response, ServiceNow, Root-Cause-Analysis, Incident-Reports, SLA ### IT Security Engineer Real Time Data Services Pvt. Ltd.. Mar 2023 - Mar 2024 ```text Operated within a multi-tenant enterprise MSSP environment, monitoring real-time security events across Azure Sentinel, ELK SIEM, and CrowdStrike EDR, including AWS cloud logs. Supported compliance readiness, evaluated third-party vendor security postures, and managed vulnerability and network security programs using Nessus, Proofpoint, and Cisco Umbrella. ``` Skills: Azure-Sentinel, ELK-Stack, CrowdStrike-Falcon-Cloud-Security, AWS, Nessus, ProofPoint, Cisco-Umbrella, Vulnerability-Management, Third-Party-Risk-Assessments, Compliance, Asset-Inventory, Change-Management ### Cyber Security Intern Airtel. Jul 2022 - Aug 2022 ```text Monitored security alerts using CrowdStrike Falcon and SentinelOne while learning vulnerability management and SOC tools. ``` Skills: CrowdStrike-Falcon-Cloud-Security, SentinelOne, Vulnerability-Management, SOC-Operations ### D2AS Associate Gaming Specialist [Amazon Development Centre India](https://himalayas.app/companies/amazon). Dec 2021 - Apr 2022 ```text Conducted continuous security monitoring and anomaly detection for gaming environments, tracking user behavioral patterns to identify policy violations, unauthorized access, and system exploits. Handled initial triage of user reports and security events, escalating confirmed security exploits according to operational protocols. ``` Skills: Security-Monitoring, Anomaly-Detection, Triage, Escalation-Management, User-Behavior-Analysis ### CS Associate [Amazon Development Centre India](https://himalayas.app/companies/amazon). Aug 2021 - Nov 2021 ```text Provided customer-facing technical support and hands-on hardware/network troubleshooting for client electronic devices, including routers, mobile devices, and networking equipment. ``` Skills: Technical-Support, Troubleshooting, Hardware, Networking, Customer-Service ## Education ### Shivaji College, University of Delhi Bachelor of Science, Physical Science. 2017 - 2020 ```text Completed a Bachelor of Science in Physical Science with a focus on Computer Science from Shivaji College, University of Delhi from 2017 to 2020. ``` ### SentinelOne SentinelOne Incident Response Engineer (SIREN), Incident Response ```text Earned the SentinelOne Incident Response Engineer (SIREN) certification, issued in October 2025 and valid through October 2026. ``` ## Tech stack - Splunk - Logstash - Kibana - Elasticsearch - Cisco Umbrella - ServiceNow - SentinelOne - Proofpoint - VirusTotal To contact Sachin, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire). ## People also viewed - [Piyush Benia](https://himalayas.app/@piyushbenia): Detection Specialist, Cumulus Systems Pvt Ltd - [Kamalapur Supriya](https://himalayas.app/@kamalapursupriya): Security Operations Analyst – L2, Accenture Pvt. Ltd. - [pradeep yerramsetty](https://himalayas.app/@pradeepyerramsetty): Security Analyst, LTI Mindtree - [Atharva Gharat](https://himalayas.app/@atharvagharat): SOC Analyst, Akati Sekurity - [Sameer Pachpande](https://himalayas.app/@sameerpachpande): SR SOC Security Analyst, Domo.INC - [Sahil Kashyup](https://himalayas.app/@sahilkashyup): Managed Security Engineer II, Deloitte USI - [HARI VAMSI RAM KONA](https://himalayas.app/@harivamsiramkona): Security Analyst, Uber India Systems Private Limited - [Aditya User](https://himalayas.app/@adityauser43): Professional II – Cyber Security, Fiserv India Pvt. Ltd. - [Dhruv Sawhney](https://himalayas.app/@dhruvsawhney): Director – Cloud Engineering, Ankura Consulting Group - [Saurabh Sharma](https://himalayas.app/@saurabhsharma14): Senior Information Security Associate, Ankura