# Richesh Yadav

> Richesh Yadav is a security operations consultant at Atos Group (Eviden) who investigates security incidents, runs phishing response, coordinates endpoint containment, and turns findings into clear, decision-ready reports.

Richesh Yadav (Yadav Richesh Kumar) is a Security Operations Consultant at Atos Group (Eviden), based in Pune, Maharashtra, India. In security operations since February 2022 (4+ years). Currently extending SOC experience into AI security.

## Capabilities

- **Security monitoring (SIEM)**: Watching security alerts and system logs to spot activity that needs a closer look. Tools: IBM QRadar, Microsoft Sentinel, Microsoft Defender, Threat intelligence.
- **Incident investigation**: Following the evidence behind an alert to decide whether it is a real threat. Tools: IOC analysis, Endpoint investigation, Recorded Future, Escalation.
- **Phishing response**: Confirming whether a suspicious email is malicious and containing the damage if it is. Tools: Email analysis, Microsoft Defender, User impact review.
- **Endpoint containment (EDR)**: Isolating an affected computer so a threat cannot spread, with proper authorisation. Tools: CrowdStrike Falcon, Carbon Black, Host quarantine.
- **Data loss prevention (DLP)**: Reviewing and handling authorised requests around rules that stop sensitive data leaving. Tools: Trellix, Policy exceptions, Data-owner coordination.
- **Security reporting**: Turning incidents and alert trends into clear reports that leaders can act on. Tools: Monthly matrix reporting, Investigation write-ups, Stakeholder updates.

## Experience

- **AI-assisted building & AI security foundations**, Independent (2026 – Present): Exploring how AI tools support practical problem-solving and product prototyping. Built the Orbit interactive prototype through an AI-assisted process and began a structured learning path toward AI automation and AI security.
- **Consultant — Security Operations**, Atos Group (Eviden) (Feb 2025 – Present): Phishing investigation, incident coordination, endpoint containment, authorised DLP-request handling, reporting and cross-team communication for a client security environment. Personally handles about 4–5 confirmed phishing cases per month.
- **Information Security Analyst**, TSYS Card Tech (Aug 2022 – Feb 2025): Investigated and closed security alerts in a large payments environment, with peak personal queues of roughly 80–100 alerts a day, converting relevant findings into cases and tickets.
- **SOC — SIEM Admin / Associate**, SecurityHQ (Feb 2022 – Aug 2022): 24/7 rotational SIEM administration, platform monitoring, log-source troubleshooting and QRadar health reporting for a team supporting 100+ client environments.

## Projects

- **Orbit** (Interactive prototype; Live prototype, 2026) — https://orbit.richesh.top: A visual prototype for organising manually entered goals, habits, tasks, finance records, journal entries and daily wellbeing check-ins in one personal command center.
- **Finance Intelligence Workspace** (Personal finance; In progress, Ongoing): A developing workspace for daily expense tracking, categorisation, monthly ledgers, investment planning and long-term financial visibility. AI-assisted analysis remains a planned capability.
- **Internal Workflow Automation** (TSYS · Confidential; Completed, 2022–2025): An internal TSYS script that opened multiple operational dashboards through one workflow, reducing repetitive setup for analyst work. The implementation stays private because it belongs to an internal environment.

## Current focus

- Now / Operating: **Incident investigation & response** — Phishing analysis, alert validation, endpoint investigation, containment and coordination.
- Now / Deepening: **Security operations workflows** — Task ownership, investigation handoffs, recurring reporting and decision clarity.
- Active / Building: **AI-assisted prototyping** — Using AI tools to structure ideas, develop prototypes and explore repeatable automation.
- Next / Specialising: **AI & LLM security** — Structured study of AI-system risks, OWASP guidance and MITRE ATLAS.

## Open to

- Generative AI Security Consultant
- Prompt & LLM Security Architect
- Cloud AI Security Specialist
- AI Governance & Compliance Lead

## Contact

Email: yadavricheshkumar@gmail.com
LinkedIn: https://www.linkedin.com/in/richeshkumaryadav/

## Certifications

- CompTIA Security+ (SY0-601) — CompTIA, 2023
- AWS Certified Cloud Practitioner — Amazon Web Services, 2024

## Education

- Swami Ramanand Teerth Marathwada University, Nanded, Maharashtra (2021)

## Pages

- [Home](https://www.richesh.top)
- [Work](https://www.richesh.top/work)
- [Services](https://www.richesh.top/services)
- [About](https://www.richesh.top/about)
- [Contact](https://www.richesh.top/contact)

## Profiles

- [LinkedIn](https://www.linkedin.com/in/richeshkumaryadav/)
- [Instagram](https://www.instagram.com/richesh_arya/)

## Optional

- [Sitemap](https://www.richesh.top/sitemap.xml)