Mohan Bahadur
CyberSecurity Specialist
Bangalore
Summary
Cybersecurity Specialist with 10+ years of IT experience, including 9+ years in SOC operations and incident response. Skilled in SIEM platforms (ArcSight, Microsoft Sentinel), threat detection, and reducing false positives through optimized use cases. Experienced in malware analysis, threat intelligence, and compliance (ISO 27001, PCI DSS, HIPAA). Strong collaborator with a focus on proactive security and continuous improvement.
Overview
11
11
years of professional experience
3
3
Certifications
Work History
Cybersecurity Specialist
LTIMindtree
Bangalore
05.2023 - Current
- Led end-to-end investigation of security incidents, performing advanced forensic analysis on compromised endpoints and networks to identify root cause and containment strategies.
- Produced detailed Root Cause Analysis (RCA) reports with actionable recommendations, reducing incident recurrence.
- Developed, fine-tuned, and automated detection rules/use cases, significantly reducing false positives and improving alert fidelity.
- Tracked and analyzed Indicators of Compromise (IOCs)and emerging threat vectors to enhance threat detection capabilities.
- Identified control gaps during internal/external audits and implemented corrective actions to strengthen security controls.
- Authored and maintained security policies, incident response playbooks, and standard operating procedures (SOPs).
- Collaborated with cross-functional teams (network, cloud, endpoint, and vendors) for effective incident resolution.
- Mentored junior SOC analysts, improving team capability and reducing escalation dependency.
- Conducted malware analysis and phishing investigations to prevent recurring attacks and improve detection logic.
- Led tabletop exercises and cyber incident simulations to enhance organizational preparedness and response maturity.
Cybersecurity Consultant
Capgemini
Bangalore
03.2022 - 04.2023
- Acted as the primary point of contact for clients, ensuring successful SIEM delivery and continuous security improvements.
- Implemented and optimized Microsoft Sentinel (Azure SIEM) across multiple client environments, improving detection coverage by 35%.
- Collaborated with stakeholders to gather security requirements and translate them into actionable SIEM use cases, delivering 20+ custom detection rules aligned with business risks.
- Developed and fine-tuned detection logic using KQL, reducing false positives by 25% and enhancing alert fidelity.
- Automated alert triage and response workflows using Azure Logic Apps, reducing manual effort by 30% and improving incident response times.
- Managed 5–7+ client environments across multiple industries, demonstrating strong consulting capability and scalability.
Security Analyst
Inspira Enterprise India Pvt Ltd
Mumbai
01.2020 - 04.2022
- Monitored and investigated security events using ArcSight SIEM to identify and validate potential threats.
- Performed incident analysis and initial RCA, escalating complex cases to senior teams when required.
- Fine-tuned SIEM use cases and alert thresholds to improve detection accuracy and reduce false positives.
- Conducted malware and phishing analysis to support remediation efforts.
- Analyzed logs from firewalls, IDS/IPS, routers, proxies, and operating systems for suspicious activity.
- Monitored WAF and IOC alerts to detect anomalous traffic.
- Ensured SLA compliance through timely investigation and escalation.
Security Analyst
Acusis Software India Pvt Ltd
Bangalore
02.2017 - 01.2020
- Monitored and investigated security events using ArcSight SIEM to identify and validate potential threats.
- Performed incident analysis and initial RCA, escalating complex cases to senior teams.
- Fine‑tuned SIEM use cases and alert thresholds, reducing false positives and improving detection accuracy.
- Conducted malware and phishing analysis to support remediation efforts.
- Analyzed logs from firewalls, IDS/IPS, routers, proxies, and operating systems for suspicious activity.
- Monitored WAF dashboards and IOC alerts to detect anomalous traffic.
- Ensured SLA compliance through timely investigation, escalation, and closure of incidents.
Engineer System
Acusis Software India Pvt Ltd
Coimbatore
08.2015 - 01.2017
- Managed and monitored installed systems for high availability.
- Provided L1/L2 technical support and troubleshooting.
- Administered AD Forests, DHCP, DNS, and infrastructure services.
- Monitored network connectivity using GFI tools.
- Investigated irregularities in critical systems and reported findings.
Education
B.Tech - Information Technology
Anna University
Coimbatore05-2012
Diploma - Information Technology
SRMV Polytechnic College
Coimbatore05-2009
Skills
Security Operations Center (SOC)
Incident Response Planning
Information Security Policies
Threat Intelligence Analysis
Certification
Certified Ethical Hacker (CEH)
Timeline
Cybersecurity Specialist
LTIMindtree
05.2023 - Current
Cybersecurity Consultant
Capgemini
03.2022 - 04.2023
Security Analyst
Inspira Enterprise India Pvt Ltd
01.2020 - 04.2022
Security Analyst
Acusis Software India Pvt Ltd
02.2017 - 01.2020
Engineer System
Acusis Software India Pvt Ltd
08.2015 - 01.2017
B.Tech - Information Technology
Anna University
Diploma - Information Technology
SRMV Polytechnic College
Declaration
I hereby declare that the information furnished above is true to the best of my knowledge.