Skip to content
RYRichesh YadavSECURITY OPS → AI SECURITY

richesh.top/about

Built inside the SOC.
Extending toward AI.

From SIEM administration and platform health to alert investigation, phishing response, endpoint containment and operational coordination. The next stage applies that experience to automation and AI security.

ROLE
Security Operations Consultant, Atos Group (Eviden)
BASE
Pune, Maharashtra, India
IN SECURITY OPS
4+ years, since Feb 2022
HEADING TOWARD
AI & LLM security

Career trajectory

Four chapters, newest first. Each one added a layer: platform health, then investigation at volume, then response ownership, and now building.

  1. NOW

    AI-assisted building & AI security foundations

    Independent · Self-directed

    Exploring how AI tools support practical problem-solving and product prototyping. Built the Orbit interactive prototype through an AI-assisted process and began a structured learning path toward AI automation and AI security.

    • AI-assisted development
    • Prototyping
    • AI automation
    • AI security foundations
  2. NOW

    Consultant — Security Operations

    Atos Group (Eviden) · Pune, India

    Phishing investigation, incident coordination, endpoint containment, authorised DLP-request handling, reporting and cross-team communication for a client security environment. Personally handles about 4–5 confirmed phishing cases per month.

    • Microsoft Defender
    • CrowdStrike Falcon
    • Trellix
  3. Information Security Analyst

    TSYS Card Tech · Pune, India

    Investigated and closed security alerts in a large payments environment, with peak personal queues of roughly 80–100 alerts a day, converting relevant findings into cases and tickets.

    • Carbon Black
    • Recorded Future
    • Microsoft Sentinel
    • IOC handling
  4. SOC — SIEM Admin / Associate

    SecurityHQ · India

    24/7 rotational SIEM administration, platform monitoring, log-source troubleshooting and QRadar health reporting for a team supporting 100+ client environments.

    • IBM QRadar
    • SIEM administration
    • Log sources
    • Reporting
  5. 2021 · ACADEMIC FOUNDATION

    Swami Ramanand Teerth Marathwada University

    Nanded, Maharashtra

Security operations today. AI security next.

Keeping investigation fundamentals sharp while building practical AI and automation skills, without overstating where the transition stands.

  1. NOW / OPERATING

    Incident investigation & response

    Phishing analysis, alert validation, endpoint investigation, containment and coordination.

  2. NOW / DEEPENING

    Security operations workflows

    Task ownership, investigation handoffs, recurring reporting and decision clarity.

  3. ACTIVE / BUILDING

    AI-assisted prototyping

    Using AI tools to structure ideas, develop prototypes and explore repeatable automation.

  4. NEXT / SPECIALISING

    AI & LLM security

    Structured study of AI-system risks, OWASP guidance and MITRE ATLAS.

Let's compare notes.

Whether it's SOC workflows, phishing investigations or the security of AI systems, conversations grounded in real operational work are always welcome.

Start a conversation