Anand R Menon

• Managed 15+ member-SOC Team which serves customers around the world.
• Deeply involved in every stage of SOC services to clients right from customer onboarding to SOC maturity
understanding customer pain points, rule creations, finetuning, automations, curated threat intelligence, threat
hunting and other value-adds.
• Developed Incident Response Playbooks and Alert Triage Runbooks related to different attack vectors and
vulnerabilities.
• Reported critical findings related to firewall and database instance public exposure which helped significantly
reduce customers attack surface and improve security posture.
• Discovered and reported breached credentials of customers via dark-web monitoring.
• Established pro-active monitoring through threat hunting practice within the team; conducted both IoC-based and MITRE TTP-based threat hunting.
• Curated Threat Advisory Notification reports with latest, relevant and actionable threat-intel for customers.
• Strong focus on upskilling the team in both technical and interpersonal areas-weekly tech sessions, daily standup calls, fun chats.

• Managed and optimized security tools such as SIEM, IDS/IPS, and EDR solutions, ensuring their proper
configuration, tuning, and maintenance to maximize efficacy in detecting and mitigating security threats.
• Closely collaborated with the SOC-Onshore-Team of one of the biggest food-retail chains in US.
• Provided support and guidance to L1 analysts during monitoring and incident response activities, coordinating efforts to investigate and mitigate security threats effectively.
• Involved in a Windows Registry Forensics project which successfully uncovered tradecraft deployed by a malware to achieve defense evasion and persistence.

• Established Security Operations Center from scratch and acted as the main point-of-contact for customer
escalations and service requests.
• Implemented, documented and fine-tuned leading cybersecurity solutions(SIEM/SOAR, EDR, XDR) giving
utmost priority to customers pain points.
• Provided comprehensive cybersecurity training to internal and customer SOC teams.
• Spearheaded threat hunt and threat intelligence operations with exceptional focus on detecting and remediating in-the-wild security vulnerabilities and zero-day attacks.

• Monitored, triaged and remediated alerts in leading SIEM, EDR solutions.
• Assisted SIEM Engineering team in alert finetuning activities.
• Conducted customer meetings and delivered periodical alert reports filled with extensive triage, remediation
information and value-add suggestions.

• Customised crucial setups and resolved issues in Oracle Apps ERP software while working on projects for major
clients.
• Involved in ERP new-version implementation and end-to-end testing.
• Received multiple appreciations from clients and managers for resolving major issues in client setups.