Pankaj Kaushik Email & Phone Number

• Responsible for threat management, monitoring, and response by using a variety of security solutions across client environments• Primarily investigate, respond to, and hunt for threats using Microsoft Azure Sentinel, Azure Defender, Microsoft 365 Defender, and third-party security products• Manage Security Operations Team (FTEs, Contractors, Service Providers, etc.)• Manage Microsoft cloud security operations and own end-to-end accountability• Ensures the client SOC teams are delivering maximum value to the business by performing analysis, planning, and direction to senior management• Managing IAM operations w.r.t access provisioning/ de-provisioning via Microsoft Azure IAM• Ensure secure access to resources with Azure identity and access management solutions – Azure RBAC, Directory Service, SSO, MFA, PIM, Conditional Access Policies• Assess vulnerabilities, monitor threats, and provide remediations (manual/automatic) using services such as Azure Security Center, Defender, Update Management, Sentinel, Monitor, SQL Auditing, Log Analytic Workspace (LAW), Service and Resource Health• Analyze logs and enforce network security using Azure Network Watcher, NSG IP Flow Logs and Azure Firewall and DDoS• Ensure security of applications hosted on Azure using tools and services such as Azure Application Gateway, Azure WAF, Azure App Insight• Ensure alert detection, threat visibility, proactive hunting, and threat response via Azure Sentinel (SIEM)• Ensure detection of potential vulnerabilities affecting organization's identities and configure automated remediation policy to low, medium, and high sign-in risk and user risk via Azure AD Identity Protection• Ensure vigilance over Azure AD Domain Services signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed• Ensure safeguarding organization against malicious threats posed by email messages, links (URLs), and collaboration tools via Defender for O365• Ensure Intune management via device policies to help enterprise networks prevent, detect, investigate, and respond to advanced threats• Identify, define and update remediation procedures for security incidents• Resolve security incidents/threats within the given time frame, according to their severity levels• Recommend best practices for securing the Azure platform• Providing weekly and monthly reporting of the status of security operations to client leadership• Develop and maintain KPIs that provide a view over the effectiveness of security operations on identifying threats