Open to opportunities

Umesh kumar M

@umeshkumarm

Message

SOC analyst specializing in SIEM/SOAR, threat monitoring, incident response automation.

India

Message

What I'm looking for

I’m looking for a security team where I can own SIEM/SOAR detections, automate incident response workflows, and improve false-positive rates. I want to deepen threat hunting and investigation quality while delivering reliable SOC operations.

I’m a cybersecurity professional with 2+ years of experience in Security Operations Center (SOC), SIEM administration, threat monitoring, incident response, and security analytics. I focus on turning security events into actionable detections through strong correlation, log analysis, and continuous improvement.

In my current SOC Analyst role, I monitor security events to identify malicious activity and potential cyber threats, investigate incidents using FortiSIEM, Wazuh, and ManageEngine, and strengthen detection by building and optimizing SIEM use cases. I also support threat hunting, alert triage, escalation, and resolution tracking, while generating security reports and recommendations.

Previously, as a SecOps Implementation Engineer, I architected and deployed SIEM and SOAR solutions to improve threat visibility and incident response. I implemented Wazuh for real-time threat detection, configured FortiSIEM for centralized log collection and security analytics, and developed automated playbooks with FortiSOAR to streamline security operations.

My technical foundation also includes network security work and security tooling across platforms like Graylog, AlienVault, and Seceon, along with vulnerability assessment experience. I’m currently pursuing an M.Tech in Cybersecurity and bring a security-by-design mindset—combining defensive operations with the curiosity of ethical hacking and secure authentication research.

Experience

Work history, roles, and key accomplishments

Current

SOC Analyst

Current

Amvion Labs Pvt. Ltd.

Oct 2025 - Present (9 months)

Monitor and analyze security events to identify malicious activity and potential cyber threats. Perform incident investigation and threat hunting using FortiSIEM and Wazuh, and improve SIEM detections through tuning and log analysis.

Security Operations Center (SOC)Security Monitoring Incident Response Threat Hunting SIEM Wazuh ManageEngine Threat Detection Log Analysis Detection Tuning

SecOps Implementation Engineer

Secure Network Solutions India Private Limited

Dec 2024 - Oct 2025 (10 months)

Architect and deploy SIEM and SOAR solutions to improve threat visibility and incident response. Implement Wazuh and FortiSIEM for monitoring and analytics, and automate security workflows using FortiSOAR playbooks.

SIEM SOAR Wazuh Event Correlation Security Analytics FortiSoar Playbooks Testing Performance Optimization Incident Response

Network Security Engineer Trainee

Secure Network Solutions India Private Limited

Jun 2024 - Dec 2024 (6 months)

Support enterprise network security environments and security monitoring platforms. Assist with FortiSIEM administration, SIEM/SOAR deployment activities, alert monitoring, validation, troubleshooting, and documentation.

Network Security Security Monitoring Event Monitoring SIEM SOAR Troubleshooting Security Documents

SOC Internship Trainee

Necurity Solutions Network Security Pvt. Ltd.

Jan 2024 - May 2024 (4 months)

Use security monitoring platforms to perform threat monitoring and security event analysis. Assist incident identification and investigation, and conduct vulnerability assessments using the deployed tooling.

AlienVault Graylog Wazuh Vulnerability Assessment Security Analysis

Ethical Hacking Intern

Ethical Edufabrica Pvt. Ltd.

Nov 2021 - Dec 2021 (1 month)

Conduct ethical hacking exercises and Capture The Flag (CTF) activities. Apply penetration testing methodologies to identify security weaknesses and strengthen knowledge of offensive security concepts and attack techniques.

Ethical Hacking Capture The Flags Penetration Testing Offensive Security

Ethical Hacking Intern

Remarkskill Education

Aug 2021 - Sep 2021 (1 month)

Perform vulnerability assessments and security testing using common penetration testing tools. Document findings with remediation recommendations and apply penetration testing methodologies and cybersecurity best practices.

Vulnerability Assessment Nessus Nmap Burp suite Metasploit Security Testing Penetration Testing Findings Documentation remediation Security Best Practices

Education

Degrees, certifications, and relevant coursework

SRM Institute of Science and Technology (SRMIST)

Master of Technology (M.Tech), Cybersecurity

2024 - 2026

Pursuing an M.Tech in Cybersecurity. Conducted academic research for a paper on sequential multi-tier authentication and secure file access for cloud storage.