SUDHEER VASA

Senior Cyber Security Analyst | Incident Response | Threat Hunter

Actively looking · Member since 23 Sep 2026

Message

Location: Hyderabad, India

Desired salary: Unspecified

Work preference: Remote Only / Full Time

Experience level: Senior

About

Professional summary

I am a Senior Cyber Security Analyst with over five years of experience in SOC operations, incident response, threat hunting, detection engineering, and security analytics across enterprise environments.

I lead end-to-end investigations across endpoint, network, identity, cloud, and application telemetry. My incident response work includes triage, containment, eradication, remediation, root-cause analysis, post-incident reporting, and stakeholder coordination.

I conduct proactive, intelligence-led threat hunts using IOCs, IOAs, vulnerabilities, malware campaigns, adversary TTPs, and behavioral anomalies. I map findings to MITRE ATT&CK, the Cyber Kill Chain, and the Diamond Model to identify coverage gaps and improve detection capabilities.

I have hands-on experience with SIEM, EDR, XDR, cloud security, vulnerability management, web security, identity security, and email security platforms. I analyze malware, phishing, ransomware, suspicious sign-ins, credential exposure, network activity, and endpoint artifacts across Windows, macOS, and Linux environments.

I develop and tune detection rules, correlation searches, suppression logic, IR playbooks, dashboards, and automation workflows to reduce false positives and accelerate response. I also support security requests, compliance assessments, vulnerability remediation, and enterprise security operations while maintaining SLA requirements.

My background includes working with global enterprise clients in SOC and threat-hunting roles, as well as foundational exposure to VAPT, ethical hacking, digital forensics, networking, and quality assurance.

Tech stack & tools

Working toolkit

Application Hosting

CentOS

Collaboration

Jira

Experience

Career history

Senior Cyber Security Analyst / Incident Response / Threat Hunter Clarivate

Dec 2023 – Present

I operate within an in-house SOC supporting enterprise-wide security monitoring, incident response, and proactive threat hunting. I lead investigations across endpoint, network, identity, cloud, and application telemetry, handling triage, containment, remediation, eradication, root-cause analysis, and post-incident reporting.

I develop threat-hunting models, detection and suppression rules, correlation searches, IR playbooks, and automation workflows. I investigate phishing, malware, ransomware, credential exposure, suspicious sign-ins, DLP violations, web threats, vulnerabilities, and brand impersonation domains while supporting IAM, PAM, WAF, Zscaler, Keeper, vulnerability remediation, compliance questionnaires, and ServiceNow-based security operations.

Threat Hunter Atos

Mar 2022 – Dec 2023

I supported multiple enterprise clients by conducting threat hunting, anomaly detection, IOC/IOA correlation, malware validation, and threat intelligence analysis. I analyzed firewall, proxy, VPN, Windows, Azure AD, cloud, IDS/IPS, DNS, EDR, and UEBA telemetry to identify attack origin, behavior, and impact.

I contributed to detection improvements, SOP development, log normalization, remediation guidance, and new investigative capabilities. I assessed customer network security gaps, responded to threat-identification queries, and provided remediation recommendations using hunting analysis and sandboxing tools.

SOC Analyst Atos

Oct 2021 – Mar 2022

I supported cybersecurity operations for enterprise banking and financial-services clients. I monitored and investigated SIEM and security alerts across ELK, ArcSight, Microsoft Defender, Azure, Exchange Online Protection, endpoint, proxy, database, and deception technology telemetry.

I performed malware, URL, email header, proxy, firewall, IPS, WAF, DHCP, Active Directory, VPN, and database log analysis. I validated IOCs, supported blocking actions, managed incidents through ticketing systems, and created runbooks, rules, dashboards, operational reports, and recommendations for critical and high-severity incidents.

Cyber Security Trainee Purple Synapz

Jun 2021 – Oct 2021

I built foundational cybersecurity skills in networking, SIEM, VAPT, OWASP, Windows and Linux security, ethical hacking, cloud platforms, and digital forensics.

I practiced with Wireshark, Kali Linux, Burp Suite, Nmap, Nessus, Metasploit, DVWA, Autopsy, Volatility, Active Directory, and Check Point Firewall. My training also included firewall policy configuration, VPN setup, sandboxing, and basic red-team and blue-team exercises.

Software Intern Happy Adda

Jun 2018 – Dec 2018

I worked as a Quality Assurance intern, building test cases and conducting thorough testing for vernacular games. I identified bugs and contributed to improving product quality.

I also created quantitative aptitude questions for the verbal series used within the games, supporting the functionality and content requirements of the product.