Utkarsh Pratap Singh
Delhi NCR
Summary
Cybersecurity Engineer / SOC L2 Analyst with 10+ years of IT experience and 4.5+ years in security operations, specialising in incident response, threat detection, and SIEM/EDR platforms. Strong foundation in network security, log analysis, and security monitoring across enterprise environments.
Developing expertise in OT/ICS cybersecurity, including Industrial Control Systems (ICS), network segmentation, and critical infrastructure protection aligned with NIST 800-82 and IEC 62443 frameworks. Adept at bridging IT and OT security practices to enhance organizational resilience.
Overview
10
10
years of professional experience
1
1
Certification
Work History
Cyber Security Engineer
Satrixx
Gurugram, India
08.2025 - Current
- Investigate and respond to enterprise security incidents across endpoints, network, and email systems.
- Perform deep analysis of logs (AD, VPN, firewall, and proxy) to identify the root cause and recommend remediation.
- Handle alerts, including phishing, malware, brute force, suspicious logins, and network anomalies.
- Collaborate with network, infrastructure, and security teams to improve security posture and segmentation.
- Apply incident response methodologies that align with critical infrastructure protection practices.
CYBER SECURITY ANALYST
Softenger
Pune, India
04.2025 - 08.2025
- Monitored and triaged alerts from Microsoft Defender, IronPort, and Forcepoint DLP via ArcSight.
- Reduced false positives by 30–40% through rule tuning and log correlation.
- Supported threat detection and escalation, aligned with SOC playbooks.
- Worked on firewall and WAF alerts, improving network-level visibility.
SOC Analyst
Kyndryl
Noida , India
01.2022 - 01.2025
- Performed continuous monitoring using Microsoft Sentinel and the Defender suite.
- Investigated endpoint, identity, and email-based threats.
- Integrated logs from multiple sources, including firewall and network devices.
- Developed SOAR playbooks for automated incident response.
- Supported network security improvements relevant to segmentation, and access control.
Senior System Administrator / Team Lead
Kyndryl
Noida , India
10.2021 - 01.2022
- Implemented endpoint hardening and vulnerability reduction strategies.
- Led server incident handling and infrastructure monitoring.
- Worked on system availability, monitoring tools, and operational dashboards.
System Administrator – IT Infrastructure Support
IBM India / CSC
Noida, India
02.2016 - 09.2021
- Managed Windows and Linux servers, ensuring high availability.
- Supported NOC operations, including monitoring, alert handling, and escalation.
- Maintained network uptime and handled infrastructure incidents.
Skills
- SIEM & SOAR: Microsoft Sentinel, ELK, ArcSight, & FortiSOAR
- EDR & DLP: IronPort, Forcepoint DLP, Email Analysis, Phishing Triage
- OT/ICS Security (Foundational Exposure): Understanding of ICS/OT environments, Purdue Model & OT network segmentation; Familiar with NIST 800-82 and IEC 62443, Critical infrastructure security and IT-OT integration risks
- Firewalls: Palo Alto Networks Firewall, Cisco Firepower, Fortinet (FortiGate), Check Point Firewall, and WAF
- Monitoring Tool: Nagios, SolarWinds Smarts (V8, V9), Scom,
- Incident Management Systems: ServiceNow, JIRA, Remedy
- Networking: TCP/IP, DNS, DHCP, VPN
- Cloud: Microsoft Azure, Azure AD
- Cloud Security: Azure, AWS, Office 365 Security
- Frameworks: MITRE ATT&CK, NIST, ITIL
- Scripting & Automation: Python, Bash, Microsoft Logic Apps
- Reporting: Power BI, Excel Dashboards
- Leadership: Team management, vendor liaison, policy adherence
Projects
- Implemented SIEM and SOAR automation to enhance detection and response.
- Integrated threat intelligence feeds for faster IOC-based investigations.
- Supported network monitoring and segmentation improvements.
KEY ACHIEVEMENTS
- Reduced high-severity incidents by 30% with customised monitoring rules.
- Achieved 50% MTTR reduction with automation and RCA practices.
- Delivered multiple high-impact solutions, aligned with ITIL and SOAR integrations.
- Mentored Tier-1 teams, increasing overall alert triage accuracy and efficiency
Certification
- SC-300: Microsoft Identity & Access Administrator
- SC-900: Microsoft Security, Compliance & Identity Fundamentals
- SC-200: Microsoft Security Operations Analyst (In Progress)
- CISSP (Pursuit Planned – 2025)
Education
- Master of Computer Applications: Computer Applications, 2016 (Dr A P J Abdul Kalam Technical University, Meerut, UP)
- Bachelor of Computer Application: Computer Applications, 2014 (Pt Deen Dayal Upadhyaya Management College, Meerut, UP)
ADDITIONAL INFORMATION
- Strong interest in OT/ICS cybersecurity and industrial automation security
- Actively learning IEC 62443 and OT security frameworks
- Open to roles in OT Security, SOC, and critical infrastructure protection.
Timeline
Cyber Security Engineer
Satrixx
08.2025 - Current
CYBER SECURITY ANALYST
Softenger
04.2025 - 08.2025
SOC Analyst
Kyndryl
01.2022 - 01.2025
Senior System Administrator / Team Lead
Kyndryl
10.2021 - 01.2022
System Administrator – IT Infrastructure Support
IBM India / CSC
02.2016 - 09.2021