Santhosh S

Cybersecurity Specialist | 11+ Years in Cyber & Information Security | Expertise in Endpoint Security, Email Security, DLP, EDR/XDR, & Vulnerability Management | 2X Microsoft Azure Certified

Bengaluru, Karnataka, India

About

With a solid foundation in Information Technology and a passion for cybersecurity, I bring over 11.7 years of industry expertise, bolstered by my academic achievements and continuous learning in this fast-evolving field. Driven by a fascination with safeguarding information assets, I have dedicated myself to specializing in cyber and information security, continually updating my skills to keep pace with the latest in threat landscapes and security solutions. Throughout my career, I've had the privilege of working with TechMahindra and other leading organizations, where I've progressed from roles as a cybersecurity analyst to consultant. My experience spans various sectors, focusing on critical areas like endpoint security, email security, Data Loss Prevention (DLP), cloud security, Extended Detection and Response (EDR/XDR), and vulnerability management. These roles have given me the opportunity to work on complex projects, collaborate with global clients, and deliver robust security strategies that drive impactful results and help fortify clients' security posture. Looking forward, I am committed to advancing my expertise in cybersecurity to meet emerging challenges and evolving threats. My goal is to leverage my knowledge and experience to develop innovative solutions that strengthen organizational security frameworks, contribute to industry advancements, and support my professional growth in a leadership role.

Experience

  • Lead Consultant at Tech Mahindra
    Aug 2025 - Present · 1 yr 3 mos

    In my role as a Cybersecurity/Endpoint Security Specialist, I manage and support enterprise-wide security initiatives across Microsoft Defender for Endpoint, Proofpoint Email Security, Microsoft Purview DLP, Microsoft BitLocker, and Nessus vulnerability management. I lead endpoint security operations including onboarding/offboarding, policy configuration, threat investigations, and incident response, ensuring devices remain compliant and protected against evolving cyber threats. My responsibilities include designing and fine-tuning security policies such as attack surface reduction rules, DLP rules, encryption standards, and email filtering controls, while continuously monitoring alerts and executing response actions in coordination with the SOC. I oversee Proofpoint and Defender email security operations by analyzing phishing attempts, reviewing quarantined messages, tuning anti-spam/anti-phishing rules, and reducing false positives to enhance protection. I support data protection initiatives by managing Microsoft Purview DLP policies, performing rule tuning, incident review, and compliance reporting to prevent unauthorized data exposure. Additionally, I manage BitLocker encryption deployment and compliance through Intune and Group Policy, ensuring secure data at rest and maintaining recovery key processes. I perform vulnerability assessments using Nessus, generate remediation reports, and work closely with infrastructure teams to ensure vulnerabilities are addressed efficiently. I also provide technical recommendations, create dashboards for monitoring security metrics, collaborate with internal stakeholders to strengthen security posture, and stay current with emerging threats and best practices to continually enhance organizational defense mechanisms.

  • Cyber Security Specialist at Cognizant
    Mar 2022 - Sep 2024 · 2 yrs 7 mos

    In my role at Cognizant, I specialized in cybersecurity, focusing on managing critical security infrastructures. I was responsible for operational and engineering tasks across various platforms, including Defender for Endpoint, Defender for Cloud, Microsoft Purview DLP, Proofpoint Email Security and Nessus Vulnerability Management. My work involved implementing advanced security measures to protect sensitive data, mitigate threats and vulnerabilities effectively.

  • Cyber Security Consultant at KPMG Global Services (KGS)
    Dec 2020 - Mar 2022 · 1 yr 4 mos

  • Senior Specialist at HCL Technologies
    Apr 2018 - Dec 2020 · 2 yrs 9 mos

    Served as a Senior Specialist responsible for managing and securing the endpoint security infrastructure. Administered and optimized key endpoint security tools, including Symantec Endpoint Protection, Microsoft Defender AV, and Microsoft 365 Defender (XDR), ensuring robust protection and compliance across all endpoints.

  • Security Operations Center Analyst at IMSI India Pvt. Ltd.
    May 2016 - Jan 2018 · 1 yr 9 mos

    Served as a SOC Analyst responsible for managing endpoint security infrastructure, email gateway protection, vulnerability management, and data loss prevention (DLP). Administered and monitored key security tools, including Symantec Endpoint Protection, Symantec Email Gateway, Nessus Vulnerability Management, and Symantec DLP, to safeguard organizational assets and ensure comprehensive threat mitigation.