Samrat Das
29th Main, BTM 2nd Stage, Bengaluru,KA
Summary
Cybersecurity Manager with 9+ years of experience leading large-scale security operations and refining incident response strategies. Skilled in threat hunting, incident management, and improving SOC performance through strong team leadership. Proven ability to mentor teams and investigate complex security incidents across diverse environments. Expert in using advanced tools to enhance threat detection, ensure compliance, and promote continuous improvement. Dedicated to protecting digital assets and strengthening organizational security through innovative, collaborative solutions.
Overview
9
9
years of professional experience
1
1
Certification
Work History
Manager – Cyber defense and response
Deloitte
04.2024 - Current
- Team Leadership & Escalation Management: Led a 15-member Incident Management team, acting as an escalation point for complex incidents while mentoring analysts, responders, and threat hunters.
- Incident Investigation & Response: Conducted in-depth investigations of high-severity incidents, supporting end-to-end incident response processes including containment and recovery.
- SOC Performance & Metrics: Developed and reviewed SOC KPIs and metrics to measure and enhance incident response effectiveness and operational efficiency.
- Cloud Security Expertise: Investigated and mitigated Azure Sentinel, MCAS, Azure Security Center, and Identity Protection alerts as part of cloud platform security operations.
- Digital Risk Protection (DRP): Collaborated with DRP vendors to address trademark misuse, brand abuse, spear phishing campaigns, and harmful social media content.
- Third-Party Incident Handling & Knowledge Sharing: Managed incidents involving third-party data leaks in coordination with legal teams, and authored internal blogs on major incidents and investigative techniques for team-wide learning.
Consultant – SOC Analyst L3
KPMG
07.2023 - 03.2024
- Team Management & Mentorship: Lead a team of 10 analysts, train junior members, review incident reports, provide regular feedback, and conduct monthly performance evaluations.
- Incident Investigation & Response: Handle high-severity incident escalations, support the incident management process, and provide on-call response for EDR and SIEM-only customers.
- Detection & Rule Optimization: Proactively suggest, create, and implement fine-tuning of SIEM correlation and detection rules to enhance alert quality and reduce false positives.
- Threat Analysis & Customer Support: Manage customer service requests, perform threat hunting, and conduct in-depth email and malware analysis to support proactive threat detection.
Associate Consultant - Sen3
Paladion Networks (Atos)
Bengaluru
01.2016 - 07.2023
- Onsite Exposure: Worked onsite in the UAE for three months with a major bank, handling security incidents, investigating logs, and analyzing alerts and devices to find and fix threats while meeting all deadlines and quality standards.
- Incident Handling & SLA Adherence: Investigated and triaged security incidents while ensuring timely resolution, accurate documentation, and compliance with SLAs and SOPs.
- Alert & Threat Management: Analyzed alerts for false positives and gaps; improved detection by refining rules, suppressing noise, and escalating issues for remediation.
- Phishing & Malware Analysis: Conducted detailed analysis of phishing emails (headers, attachments, URLs), and malicious files using tools like Proofpoint, sandboxes, and log analysis.
- Endpoint & EDR Monitoring: Investigated threats using EDR tools (CrowdStrike, Microsoft Defender), reviewed ATP packages, and conducted deep endpoint forensics.
- SIEM & Log Analysis: Monitored security events via SIEM platforms (RSA, QRadar), performed root cause analysis, and ensured continuous 24/7 SOC threat coverage.
- Threat Hunting & Detection: Proactively identified threats using Paladion’s AI-MDR platform, focusing on attacker behaviors (TTPs), and machine learning-driven detection.
- Digital Forensics & Response: Utilized tools like KAPE, PeStudio, Process Explorer, and Event Viewer for forensic investigations, uncovering malicious activity and supporting IR efforts.
- Client Support & Capability Building: Engaged with clients to resolve incidents, developed use cases, refined detection techniques, and enhanced SOC efficiency.
Education
BTECH - Information and Technology
University College of Engineering And Technology
Hazaribag06-2015
12th -
LIONS Public School
Sindri06-2011
10th -
D.A.V. Model CFRI
CFRI05-2009
Skills
- Team leadership
- Team management
- Documentation and report writing
- Technical writing and client communication
- Incident handling and analysis
- Incident management and SOC operations
- Incident response
- Threat Hunting
- Malware Analysis
- Forensics and IR tools
- SIEM and EDR tools
- Email analysis
- Cloud and network security
- C and PowerShell
Accomplishments
- Client and leadership recognition: received appreciation in January 2023 for efficient project management and consistent delivery, along with special recognition from senior leadership for maintaining the quality of investigations and deliverables
Certification
- LinkedIn Learning - CompTIA Security+
- CEH
- Threat hunting - Paladion Networks
- Underwent corporate training on the SIEM tool, RSA Security Analytics
Personal Information
- Father's Name: Rathindra Nath Das
- Date of Birth: 12/01/93
Languages
Bengali
First Language
Hindi
Proficient (C2)
C2
English
Proficient (C2)
C2
Affiliations
- Badminton
- Travelling
- Competitive online gaming
Disclaimer
I hereby declare that the above-furnished details are true to the best of my knowledge.
Samrat Das
Work Availability
monday
tuesday
wednesday
thursday
friday
saturday
sunday
morning
afternoon
evening
swipe to browse
Work Preference
Work Type
Full TimeLocation Preference
On-SiteRemoteHybridImportant To Me
Career advancementWork-life balanceCompany CultureHealthcare benefitsPersonal development programsTeam Building / Company RetreatsPaid sick leaveWork from home optionPaid time offStock Options / Equity / Profit SharingFlexible work hoursQuote
Success is not final; failure is not fatal: It is the courage to continue that counts.
Winston S. Churchill
Software
SIEM Platforms: IBM QRadar, RSA Security Analytics, Splunk
EDR Solutions: CrowdStrike Falcon, Microsoft Defender for Endpoint, Symantec
Threat Intelligence & Analysis: Proofpoint, VirusTotal, Anyrun, Hybrid Analysis
Email security tools: Proofpoint, Area1, Symantec Force point, Abnormal
Forensics & IR Tools: PeStudio, KAPE, Process Explorer, Wireshark
Cloud & Network Security: Azure Security Center, MCAS, AWS, Sysdig, Zscaler
Ticketing & Case Management: ServiceNow, JIRA, IBM Resilient
Timeline
Manager – Cyber defense and response
Deloitte
04.2024 - Current
Consultant – SOC Analyst L3
KPMG
07.2023 - 03.2024
Associate Consultant - Sen3
Paladion Networks (Atos)
01.2016 - 07.2023
BTECH - Information and Technology
University College of Engineering And Technology
12th -
LIONS Public School
10th -
D.A.V. Model CFRI
Similar Profiles
Neo MojiNeo Moji
Junior Actuarial Analyst at DeloitteJunior Actuarial Analyst at Deloitte
PRIYANKA PAWAR VADAIGHARPRIYANKA PAWAR VADAIGHAR
AWS DevOps Engineer at DeloitteAWS DevOps Engineer at Deloitte
Richa NandRicha Nand
Senior Associate at DeloitteSenior Associate at Deloitte
Pavani GoudPavani Goud
Technology Analyst at DeloitteTechnology Analyst at Deloitte
Neha DasguptaNeha Dasgupta
Team Lead – Inside Sales & Growth Strategy at LivspaceTeam Lead – Inside Sales & Growth Strategy at Livspace