Archan Choudhury

I love to play it hard on technical ground. So, innovation through Blue Teaming keeps my light on, while my “Day At Work” flows like this👉 Detect Attacks♟ Remediate♟ Keep the Pipeline running♟ Keep the Environment Safe ♟Hunt for Unknown♟ Innovate♟ Inspire teams♟ Repeat

♟I bring decade old expertise and experiences in the field of information and cyber security (Consumer Goods, FMGC, Media Industries). I intent to be part of enthusiastic information security team where I can utilize my knowledge and teamwork capabilities in favor of the organization and continuous improvement through mutual learning process.

♟I work mainly on defensive security. Incident Response, Threat Hunt forensic investigation against security incidents, analysis of compromised host at forensic level, analysis of the behavior and hunt for on the IOCs for security threats, perform remediation for security incidents, analysis of binary level composition for any suspicious files/payloads; these are the parts of my daily jobs.

♟I have a deep level of understanding in Triage process for security incidents, threat event analyses on Azure IDP/Azure ATP/TrapX/Dark-Trace, Cloud Proxy- Zscaler, McAfee ePO in terms of log analysis and managing the admin activities, AI driven Antimalware tool- Cylance(EPP & EDR). Have been working on Resilient for automation of IR Process. Also, I have good understanding in SIEM- QRadar in terms of analysis, creating and fine-tuning the usecases, creating custom parser using RegEx.

♟I have developed up my capabilities for DFIR on Cloud Area(AWS, GCP, K8, WAF), plus automation of IR and taking role to create a full scale Incident management framework in Cloud. I am also working on exploring features to build the Security Operations Strategy for Cloud on Elastic SIEM.

♟Worked in Global SOC and providing cyber security services for 12+ different clients as a shared model in 24*7 environments- Remotely monitoring and managing client network security devices, detecting anomaly in client network in respect of Log source health checkup, writing scripts for automation and for creation custom add-ins in SIEM tool. I also worked on creating front-end design for websites, have understating in PHP, JavaScript, CSS-HTML5, VB-Script etc.

Service Operation Portfolio:

• Leading multi-stakeholder projects to deploy cybersecurity solutions for global clients, coordinating between different teams and ensuring high-quality delivery.
•  
• Providing services for Managed Detection and Response, Security Engineering, Cloud Security, Offensive and Defensive Security, AI Safe LLM Security, OT Security, and more.
• Spearheading partnerships with global organizations like TerraEagle to enhance cybersecurity education worldwide.

Cyber Education:

• Leading a cybersecurity firm that provides advanced, affordable, and hands-on cybersecurity training to professionals and students globally.
• Planning and organizing industry-level cybersecurity events featuring CTF competitions, product launches, and strategic collaborations. Managing and executing strategic partnerships with TerraEagle and other global firms to embed cybersecurity programs in universities across the U.S. and India.
• Collaborating with institutions like the University at Buffalo and colleges in Tamil Nadu and Pune to strengthen cybersecurity education.
• Developing cutting-edge courses in areas like Cloud Security, Microsoft Sentinel, Threat Detection, Sigma rules, and Incident Response.
• Instructing courses aimed at equipping professionals with advanced security skills, including AI Security, OT Security, and more.
• Providing expertise in SIEM tools such as Elastic SIEM, Splunk, Microsoft Sentinel for advanced threat detection and incident response at education level.
• Mentoring cybersecurity professionals and students, empowering over 16,000 individuals globally with real-world cybersecurity skills.
• Actively contributing to the advancement of the cybersecurity industry through knowledge sharing and advocacy.