Operator Profile// 02
Shubham Mane is a cybersecurity engineer with 8+ years across Rigelsky, Verizon, AT&T and Infosys, focused on detection engineering, incident response, SIEM, threat hunting and cloud security. He also brings hands-on GRC and risk experience — risk assessments, third-party risk, risk registers and audit support against NIST, HIPAA/HITRUST, PCI DSS and ISO 27001. Outside the SOC he builds AI and automation systems that run in production, wiring together n8n, Python, browser automation and modern AI APIs. Based in Chicago, IL and open to remote roles.
Deployment Log
JUL 2023 — PRESENT
Information Security & Risk Analyst (Contract)
Rigelsky, Inc.
- Monitor security events in Splunk SIEM to detect threats, investigate anomalies and escalate critical incidents.
- Threat analysis across endpoints, networks and email using CrowdStrike and Proofpoint.
- Lead incident response end to end: triage, root-cause analysis, containment and post-incident review.
- Partner with SOC teams to improve detection logic, reduce false positives and streamline response workflows.
- Run risk assessments of internal systems and third-party vendors against HIPAA, HITRUST and NIST; maintain the enterprise risk register and prepare audit and leadership reporting.
JUN 2022 — JUN 2023
Senior Security Specialist (Contract)
Verizon
- Contained state-sponsored intrusions within minutes using CrowdStrike EDR, avoiding an estimated $5M in potential damages.
- Built custom QRadar SIEM rules for specific threat patterns, cutting false positives by 60%.
- Built Splunk dashboards covering 200+ security controls, cutting critical-alert response time by 30%.
- Automated 30% of routine incident-response tasks in Jira, raising analyst productivity by 40%.
- Integrated MISP for threat-intel sharing with statewide partners and published monthly threat bulletins.
OCT 2021 — JUN 2022
Cyber Security Analyst (Contract)
AT&T
- Threat hunting with CrowdStrike Falcon uncovered hidden threats on critical assets and cut attacker dwell time by 65%.
- Wrote zero-day detection rules in SentinelOne protecting 30,000+ endpoints.
- Drove remediation of critical EDR-found vulnerabilities, shrinking the attack surface by 60% across 75,000+ endpoints.
- Collected memory dumps and disk images for 25+ APT investigations; coordinated response to 10+ major incidents affecting 100,000+ users.
- Kept incident response aligned with PCI-DSS and wrote ISO 27001-aligned incident reports for executives and auditors.
JUN 2018 — AUG 2021
Information Security Engineer
Infosys Ltd.
- Contained ransomware attacks with Carbon Black, preventing encryption on 10,000+ servers and saving an estimated $4M in recovery costs.
- Designed a centralized log-management strategy across multi-cloud environments covering 100TB+ of logs a day.
- Improved incident playbooks using MITRE ATT&CK, cutting mean time to containment by 40% for common attack types.
- Wrote forensic reports supporting 15+ legal and compliance investigations, with GDPR-compliant incident data handling.
Capability Matrix
[01] Detection & Response
Splunk ESIBM QRadarMicrosoft SentinelKQL / SPLCrowdStrike FalconSentinelOneCarbon BlackSOAR (Phantom)MITRE ATT&CK
[02] Threat Hunting & Forensics
Hypothesis HuntingVolatilityRekallFTK ImagerMemory & Disk ForensicsSuricataMISP / Threat IntelIR (NIST 800-61)
[03] Offensive & Assessment
NmapNessusMetasploitBurp SuiteOWASP ZAPPurple Teaming
[04] Cloud & Identity
Azure (Sentinel)Azure Key VaultDefender for CloudAWSAD / Entra IDIAM & Access ControlOAuth2
[05] Risk & Compliance (GRC)
Risk AssessmentsThird-Party RiskRisk RegisterNIST CSFHIPAA / HITRUSTPCI DSSISO 27001GDPR
[06] AI & Automation
PythonPowerShellSQLn8n (self-hosted)PlaywrightAnthropic Claude APIClaude CodeGeminiRailway
Credentials
// Certifications
CEHCertified Ethical Hacker
AWSSolutions Architect — Associate
SEC+CompTIA Security+
// Education
M.S. Cyber SecurityDePaul University · 2023
B.E. Computer ScienceD.Y. Patil Institute of Tech · 2018