SIEM & Detection Engineering
- ArcSight
- Splunk
- Seceon
- Securonix
- KQL Detection Logic
DEFENSE MODE: AGGRESSIVE
Blue Team | Security Operations Centre | Incident Response
Akshay Koshti Deputy Manager | Security Operations
Leading Blue Team Defense and Security Operations
Experienced Deputy Manager and Security Operations leader focused on threat detection, EDR/SIEM engineering, and incident response at enterprise scale.
Current Focus: SOC Process Hardening and XDR Enablement
Operating Region: Ahmedabad, Gujarat, India
Contact: akshaykoshti97@gmail.com
Initializing SOC telemetry...
Profile
About Me
With over 4 years of hands-on cybersecurity experience, I work at the intersection of Security Operations, incident response, and enterprise security engineering. I currently serve as a Deputy Manager, leading multi-client security initiatives, SOC process improvements, and blue-team programs designed for faster detection and stronger response.
Across organizations including Colgate, Adani, and TechD Cybersecurity, I have managed end-to-end SOC workflows from alert monitoring and triage to investigation, threat containment, and executive reporting. My practical exposure covers SIEM operations, EDR lifecycle management, phishing simulation infrastructure, cyber drill execution, and continuous security posture enhancement.
I have worked deeply across ArcSight, Splunk, Seceon, and Securonix, and led operational delivery for endpoint platforms such as CrowdStrike, Microsoft Defender, Bitdefender, SentinelOne, and Seqrite. Alongside this, I contribute to threat intelligence and external attack surface programs to support proactive defense, risk reduction, and SOC maturity at enterprise scale.
What I Bring
- Security Operations leadership with strong ownership of delivery and response outcomes
- SIEM and EDR engineering experience across enterprise and multi-client environments
- Incident readiness through phishing simulations, tabletop exercises, and ransomware drills
- Threat intelligence correlation and external attack surface monitoring for proactive defense
- Operational governance with SLA-focused reporting, stakeholder communication, and process hardening
Visual Stack
SOC Tool Wall
Capabilities
Blue Team Skill Matrix
EDR Operations
- CrowdStrike Falcon
- Microsoft Defender ATP
- Bitdefender
- SentinelOne
- Seqrite
SOC & Incident Response
- Incident triage and containment
- Threat intelligence integration
- Phishing simulations with GoPhish
- IOC handling and blocking
- SOC workflow improvements
Security Governance & Platforms
- Prisma Cloud Security
- O365 and Area1 Mail Security
- BitSight, SecurityScorecard, Cycognito
- ServiceNow and BMC ticketing
- SLA-based operational reporting
Journey
Security Operations Experience
01 May 2025 - Present
Deputy Manager - TechD Cybersecurity Limited
- Lead Product Support Group for deployment/support projects across major security products.
- Manage Seceon XDR onboarding, issue triage, troubleshooting, and client success.
- Conduct cyber drills and table-top exercises aligned with client readiness goals.
- Drive SOC continuous improvement and future-state operational updates.
- Run phishing simulation programs through GoPhish to improve employee readiness.
30 Dec 2021 - 21 Apr 2025
Deputy Manager - Adani Enterprise Limited
- Executed SIEM analysis and log operations using ArcSight.
- Managed advanced hunting and investigation in Microsoft Defender ATP.
- Built KQL detections and improved SOC alert quality.
- Led phishing campaign response and O365 protection recommendations.
- Performed investigations using CrowdStrike and Recorded Future intelligence context.
19 Jul 2021 - 27 Sep 2021
SOC Analyst - Techdefence Labs Solution Pvt. Limited
- Monitored and triaged incidents with daily reporting for multiple clients.
- Prepared threat advisories and built custom Splunk hunts/rules.
11 Jan 2021 - 09 Jul 2021
SOC Analyst Intern - Colgate Palmolive
- Supported SIEM and OT monitoring operations and use-case improvements.
- Worked on posture and intelligence initiatives including BitSight and Cycognito.
21 Jun 2018 - 31 Dec 2018
Technical Consultant - RESS GmbH
- Researched emerging technologies and prepared client-facing workshop material.
01 Jun 2017 - 01 Jul 2017
Cyber Security Intern - Gurugram Cyber Cell
- Worked on social media crime research and cyber investigation support tasks.
Impact
Key Achievements
Credentials
Awards & Certifications
Cloud Security
AZ-900 Certification
Offensive Security
Certified Ethical Hacking
Digital Forensics
Autopsy Basics Hands-on
Mobile Forensics
Certified Mobilyzer Operator
Community Leadership
Microsoft Student Ambassador (Twice)
DLP
Trellix DLP Certification
View CertificateSIEM / XDR
Seceon Innovation & Certification Days (Q2 2025)
View CertificateSIEM / XDR
Seceon Innovation & Certification Days (Q4 2025)
View CertificateEndpoint Security
Bitdefender Certification
View CertificateSecurity Leadership
CCEP: Certified Cybersecurity Educator Professional
View CertificateSecurity Operations
CPPS Certification
View CertificateRed Team Operations
CRTOM: Certified Red Team Operations Management
View CertificateThreat Intelligence
Cyber Threat Intelligence 101
View CertificateSIEM
Securonix Academy 100: Introduction to SNYPR
View CertificateResearch & Projects
Cybersecurity and Engineering Work
M.Sc. Cyber Security | Major Project
Active Directory Penetration Testing
Led a full security assessment of enterprise Active Directory across on-prem and cloud environments to map privilege escalation paths, misconfigurations, and high-impact vulnerabilities.
- Active Directory Security
- Penetration Testing
- Privilege Escalation
- IAM Security Hardening
M.Sc. Cyber Security | Minor Project
Docker Container Security
Assessed Docker environments for vulnerabilities and container-escape risks, then implemented hardening and DevSecOps-aligned controls to strengthen container security posture.
- Docker Security
- Container Hardening
- Linux Security
- DevSecOps Validation
M.Sc. Cyber Security | Minor Project
Juice Jacking Attack Simulation
Built a proof-of-concept attack scenario for malicious USB charging stations to demonstrate data exfiltration and malware delivery risks, followed by mitigation guidance.
- USB Security
- Threat Modeling
- Data Exfiltration
- Cybersecurity Awareness
B.E. Computer Engineering | Major Project
Online Comic Book Web Application
Developed a full-stack comic creation platform enabling users to create, edit, and share digital comic strips with authentication, database integration, and responsive UI.
- Java + HTML + CSS
- Database Management
- UI / UX Design
- Cloud Integration
B.E. Computer Engineering | Minor Project
Online Leave Management System
Created a leave workflow platform for request submission, approval, balance tracking, and reporting to improve transparency and reduce manual process overhead.
- Workflow Automation
- System Design
- User Authentication
- Operational Reporting
Colgate | Security Operations & Threat Intelligence
External Attack Surface & Fake Application Investigation
Investigated impersonating and suspicious public applications using EASM and OSINT workflows, validating authenticity through signatures, metadata, and threat intel correlation to reduce brand abuse risk.
- EASM
- OSINT Investigation
- Threat Intelligence Analysis
- Brand Protection
Adani | Endpoint Security Operations
EDR Handover & Security Operations Management
Managed operational handover and administration of CrowdStrike and Microsoft Defender, tuned policies for coverage, and resolved endpoint compliance gaps with governance reporting.
- EDR Operations
- CrowdStrike Administration
- Microsoft Defender
- Endpoint Compliance
Adani | Microsoft Security Program
Enterprise EDR Migration: Sentinel to Microsoft Defender
Executed large-scale endpoint migration using controlled workflows and BigFix orchestration to transition endpoints securely while maintaining continuous security visibility during acquisition-led change.
- EDR Migration
- Endpoint Security Deployment
- BigFix Integration
- Risk Mitigation
Adani | Microsoft 365 Security
E3 to E5 License Migration & Policy Optimization
Supported Microsoft security licensing migration and optimized policy baselines through assessment outputs, including domain allow/block review to reduce exposure and align with best practices.
- Microsoft 365 Security
- Security Policy Optimization
- Email Security
- Risk Assessment
Adani | Secure Communication Validation
IceWarp Secure Email Platform Security Testing
Performed security validation of executive secure-email infrastructure, checked attack vectors, and verified policy consistency with Microsoft 365 controls for controlled, residency-focused communication.
- Email Security Testing
- Policy Enforcement Validation
- Security Risk Assessment
- Platform Hardening
Adani | Threat Intelligence Investigation
BEEF Deployment for Threat Actor Tracking
Deployed Browser Exploitation Framework in a controlled environment to support investigations related to malicious misinformation activity and improve attribution visibility for threat response teams.
- Threat Actor Tracking
- Incident Investigation
- BeEF Framework
- Digital Forensics Support
TechD Cybersecurity | Awareness Engineering
Phishing Simulation Infrastructure Deployment
Designed and deployed on-prem phishing simulation infrastructure with GoPhish and multi-SMTP routing, tracking open/click/credential metrics while onboarding a commercial platform for scalability.
- Phishing Simulation
- User Behavior Analysis
- Email Security Testing
- Security Infrastructure Deployment
TechD Cybersecurity | Incident Readiness
Cybersecurity Drill: Ransomware Simulation for Fintech
Ran a ransomware-focused cyber drill with leadership and core stakeholders to test incident communication, recovery workflows, and response readiness while identifying operational resilience gaps.
- Incident Response Simulation
- Ransomware Preparedness
- Business Continuity Planning
- Risk Assessment
Connect
Let's Build Resilient Security Programs
Direct Channels
Reach Akshay Instantly
Open for SOC analyst and blue-team operations engagements.
-
Phone+91 962412XXXX
-
LocationAhmedabad, Gujarat, India
-
LinkedInlinkedin.com/in/akshaykoshti
-
GitHubgithub.com/akkidroid