Looking for a job

Sumanshu Sohal

@sumanshusohal

Cybersecurity engineer at Trellix who led incident response and implemented 15+ production detections in Trellix Helix.

At Trellix, I supported Helix SIEM, HX EDR, and NX network security operations and led high-severity incident response from triage through containment and remediation. I implemented and tuned 15+ production detections using endpoint and network telemetry, mapped to MITRE ATT&CK.

Previously, at HCL Technologies Pvt. Ltd., I ran threat hunts in Splunk ES and wrote Python scripts to support incident response and forensics. I also contributed to penetration tests at WithSecure, Inc., and built an autonomous SOC triage agent using Python, FastAPI, and the Claude API.

Experience

Work history, roles, and key accomplishments

Cybersecurity Engineer

Trellix

Sep 2023 - Mar 2026 (2 years 6 months)

Served as a Trellix SME supporting Helix SIEM, HX EDR, and NX network security operations across 12 business units and approximately 7,000 endpoints for a North American client. Led high-severity incident response, developed playbooks, and implemented and tuned 15+ production detections.

Trellix Trellix HX Incident Response Digital Forensics FTK (Forensic Toolkit)Encase Velociraptor Volatility Wireshark Zeek FLARE VM Ghidra Entra ID Microsoft 365 MITRE ATT&CK TQL Hyperautomation

Pentesting Intern

WithSecure, Inc.

Jun 2022 - Aug 2022 (2 months)

Contributed to 8 team-delivered penetration tests, helping uncover 2 high-severity vulnerabilities and multiple medium- and low-severity findings. Researched Windows malware execution techniques to identify endpoint detection opportunities.

Penetration Testing Vulnerability Assessment Malware Analysis Endpoint Detection

Tier 3 SOC Specialist

HCL Technologies Pvt. Ltd.

Oct 2017 - Jul 2021 (3 years 9 months)

Coordinated priority-incident response as the Tier 3 escalation point in a 24/7 managed SOC for HIPAA-regulated healthcare and other regulated clients. Ran threat hunts in Splunk ES, authored SPL queries, and wrote Python scripts for incident response and forensics.