KC / SEC-OPS Cybersecurity Triage
analyst@soc:~$ whoami --clearance top

KARAN CHAWLA

Cybersecurity Analyst | SOC Operations & Cloud Security

Dedicated Cybersecurity Analyst with 4+ years of front-line experience at Tata Consultancy Services (TCS). Specializing in 24x7 threat detection, SIEM/EDR log correlation, rapid incident triage, and hardening Azure cloud environments.

4+ Yrs
TCS SOC & SecOps
24/7
Incident Triage
99%
Endpoint Posture
3x
Microsoft Certified
Explore SOC Experience Playbook Simulator
Navi Mumbai, India chawlakaran280401@gmail.com +91 9167833416
Karan Chawla - Cybersecurity Analyst
STATUS // VERIFIED ANALYST

EDR & SIEM

CrowdStrike & QRadar

Cloud Defense

Azure Sentinel & Defender

Interactive SecOps Workflow

Live Incident Triage & Defense Engine

Simulate Karan's operational workflow for handling high-fidelity security events in a 24x7 SOC pipeline.

soc-triage-node-04
SIEM ENGINE: SYNCHRONIZED
Professional Profile

Defending Enterprise Clouds & Endpoints with Analytical Rigor.

I am a Cybersecurity Analyst with over 4 years of enterprise SecOps experience at Tata Consultancy Services (TCS). My daily responsibility is safeguarding complex enterprise ecosystems through real-time telemetry analysis, incident triage, and cloud security governance.

Operating across high-tempo 24x7 SOC environments, I leverage next-generation SIEM platforms such as IBM QRadar and Microsoft Azure Sentinel, in tandem with top-tier EDR solutions like CrowdStrike Falcon and Cortex XDR.

Beyond threat eradication, I bridge security and business continuity: on-boarding 10+ client architectures, enforcing 99% endpoint BitLocker and Zscaler compliance, and authoring authoritative troubleshooting documentation across corporate knowledge bases.

24x7 SOC Shift Escalation (L1 to L2/L3)
Cloud Defense: Azure Sentinel & Prisma
Malware Sandbox & Phishing Inspection
SC-200, AZ-104 & AZ-900 Certified
SOC MATRIX SNAPSHOT TCS SECURITY OPERATIONS
Primary SIEM / Data Lake: IBM QRadar / Sentinel
EDR & Threat Hunting: CrowdStrike Falcon
Cloud Protection Posture: Azure Defender & Prisma
Automation & Orchestration: Cortex XSOAR Playbooks
Endpoint Policy Posture: 99% BitLocker / Zscaler
Reduced Incident MTTR

Consistently recognized for sharpening detection tuning and accelerating escalation throughput.

Career Progression

Professional Experience

Proven track record spanning over 4 years of continuous service at Tata Consultancy Services.

Dec 2024 — Present
Active Role

Cyber Security Analyst SOC Ops

Tata Consultancy Services

Location: Navi Mumbai, India | Focus: 24x7 SOC Monitoring, Threat Detection & Cloud Posture

Conduct real-time monitoring, detection, and analysis of security events in a high-velocity 24x7 SOC environment.
Investigate and triage security incidents using IBM QRadar, CrowdStrike Falcon, and XDR platforms, ensuring seamless escalation to L2/L3 teams.
Implement and maintain Cloud Security controls utilizing Azure Sentinel, Azure Defender, and Prisma Cloud aligned with compliance benchmarks.
Perform preliminary analysis of logs and alerts, conducting phishing and malware assessments (email headers, sandbox execution, suspicious payload validation).
Analyse telemetry from firewalls, IDS/IPS, servers, and endpoints; correlate logs to identify Indicators of Compromise (IoCs) and filter false positives.
Collaborate with global IT and Network teams for incident remediation, vulnerability management, and strengthening detection rules and SOC playbooks.
IBM QRadar CrowdStrike Falcon Azure Sentinel Prisma Cloud Cortex XSOAR Malware Sandboxing
Aug 2022 — Dec 2024
2 Years 5 Mos

Technical Support Engineer Infrastructure & Sec

Tata Consultancy Services

Location: Navi Mumbai, India | Focus: Client Onboarding, Network Access & Endpoint Compliance

Successfully onboarded 10+ client projects by reviewing solution design requirements and collaborating with network teams on site-to-site & client-to-site architectures.
Maintained 99% compliance posture across enterprise endpoints via strict management of BitLocker, Zscaler, CrowdStrike, DLP, and patch cycles.
Coordinated with networking and security teams to validate and implement URL/IP whitelisting and critical port openings.
Executed hardware and device compliance audits and continuous policy enforcement adhering to regulatory benchmarks.
Resolved complex end-user issues across systems and infrastructure within stringent SLA limits.
BitLocker Encryption Zscaler ZPA/ZIA Data Loss Prevention (DLP) Patch Automation VPN & Firewalls
Competency Matrix

Defense Arsenal & Technical Skills

Filtering tools and capabilities across SIEM, cloud telemetry, endpoint protection, and incident analysis.

SIEM CORE

IBM QRadar

Real-time event logging, rule correlation, custom SOC dashboards, offence identification, and anomaly tuning.

EDR / XDR

CrowdStrike Falcon

Endpoint detection, real-time host isolation, process tree analysis, behavioral IOA/IOC hunting and telemetry.

CLOUD SEC

Azure Sentinel & Defender

Cloud-native SIEM analytics, KQL query hunting, Defender for Cloud posture management, and multi-tenant telemetry.

SOAR & CSPM

Cortex XSOAR & Prisma Cloud

Automating incident escalation playbooks, orchestration across tools, Prisma Cloud compliance policies, and posture drift.

FORENSICS

Phishing & Malware Triage

Deep email header inspection (SPF, DKIM, DMARC), sandbox detonation, payload analysis, and campaign correlation.

ENDPOINT & NET

BitLocker, Zscaler & Firewalls

99% disk encryption governance, Zscaler proxy traffic enforcement, DLP policies, firewall/IDS logs, and VPN routing.

Verified Credentials

Microsoft Certified Portfolio

Industry standard credentials establishing validated domain mastery in Azure SecOps & Infrastructure.

PRIMARY SPECIALIZATION
SC-200

Microsoft Certified: Security Operations Analyst

Validates proficiency in mitigating threats using Microsoft Sentinel, Microsoft Defender for Cloud, and Microsoft 365 Defender.

Threat Response with Microsoft Sentinel
Microsoft Defender for Endpoint Triage
Kusto Query Language (KQL) Hunting
AZ-104

Microsoft Certified: Azure Administrator Associate

Validates deep capabilities in implementing, managing, and monitoring identity, governance, storage, compute, and virtual networks.

Azure Virtual Networks & Security Groups
Role-Based Access Control (RBAC) & IAM
Storage & VM Security Architecture
AZ-900

Microsoft Certified: Azure Fundamentals

Demonstrates foundational understanding of cloud services and how those services are delivered with Microsoft Azure.

Cloud Concepts & SLAs
Azure Architecture Core Services
Azure Security, Privacy & Compliance
Academic Background

Education

Bachelor of Science in Information Technology

SIES College of Arts, Science and Commerce

Mumbai University

CGPA: 8.27
Duration: June 2019 — April 2022 Graduated First Class
Key Contributions

Key Achievements & Impact

Published "BitLocker - Problems & Solutions" Document

Penned and officially published a comprehensive reference guide in the TCS Knowledge Sharing Portal, empowering multi-tiered teams to rapidly resolve BitLocker drive encryption anomalies.

Phishing Awareness & Cyber Hygiene Campaigns

Conceptualized and spearheaded interactive security education sessions, training employees on identifying sophisticated spear-phishing attacks, deceptive email headers, and social engineering traps.

Team Skill Augmentation Sessions

Delivered cross-functional knowledge-sharing workshops on BitLocker architecture and endpoint compliance troubleshooting, elevating first-touch resolution efficiency across operational engineers.

Encrypted Transmission

Initiate Contact / Hire

Available for Cybersecurity Analyst, SOC Operations, Threat Detection, and Cloud Security roles.

Contact Number
+91 9167833416
Current Base
Navi Mumbai, Maharashtra, India
COMMUNICATION TELEMETRY ● SECURED

Response SLA: Typically within 4–6 business hours. Available for immediate interview scheduling and role alignment discussions.

SHA-256 client transmission handshake