Nihar Mehta

Nihar
Mehta

Cybersecurity Professional & Security Engineer

I connect security tools to the SIEM, keep the logs flowing, and automate the triage so analysts spend their time on real incidents.

  1. IngestLog sources and data onboarding
  2. ParsePipelines and parsing fixes
  3. DetectSIEM monitoring, MITRE ATT&CK
  4. TriageSOAR playbooks, IOC enrichment
  5. ContainIncident response and remediation

The stages of a security pipeline I work across.

About

Cyber Security Analyst with 2+ years of experience across security engineering, log integration, troubleshooting, SIEM monitoring, incident response, vulnerability management and threat containment.

Currently Security Engineer at TechOwl InfoSec, handling security tool integrations, log pipeline management and operational troubleshooting. I hold CEH v13 and an M.Sc. in Cybersecurity & Forensics.

2+years in security
35%faster response
30%less triage effort

Experience

Jul 2026 – Present

Security Engineer

TechOwl InfoSec · India
  • Manage security tool integrations across the client environment, including log ingestion, pipeline configuration and data source onboarding into the SIEM platform.
  • Troubleshoot logs across security infrastructure, diagnosing ingestion failures, parsing errors and connectivity issues.
  • Support operational troubleshooting of security monitoring systems to keep them available and data quality high.
  • Work with security teams to improve detection coverage through reliable log integration and tool configuration management.
Jan 2025 – Jan 2026

SOC Analyst Trainee

Zeronsec · Gujarat (Remote)
  • Monitored security alerts and logs using SIEM tools; investigated incidents across endpoint, network and application log sources.
  • Identified malware, phishing, ransomware and DDoS threats through log analysis; supported incident response and containment per SOC procedures.
  • Identified vulnerabilities, recommended mitigations and conducted risk assessments aligned with ISO 27001 and NIST CSF.
  • Developed Shuffle SOAR playbooks and Python scripts that reduced response time by 35% and triage effort by 30%.
Jun – Aug 2024

Digital Forensics Intern

IIMT · UP, India
  • Investigated incidents on Linux and Windows systems and produced structured reports with findings and mitigation steps.

Projects

Security Operations Platform Jan – May 2025

Full SOC stack with SIEM monitoring, log integration, threat containment workflows and automated incident documentation. Reduced response time by 35%.

  • Wazuh
  • Splunk
  • Shuffle SOAR
  • TheHive
  • MISP
  • Cortex
  • VirusTotal

SOC Operations Dashboard Jan 2026

Security monitoring dashboard tracking MTTR, MTTD, SLA breaches, incident trends and vulnerability remediation status.

  • Power BI

Security Automation Jan 2026

LLM-based agentic automation pipeline for AI-assisted IOC enrichment, risk classification and triage.

  • n8n
  • Docker

Active Directory Attack & Defense Lab

Simulated credential abuse and privilege escalation, then implemented detection improvements mapped to MITRE ATT&CK.

  • Active Directory
  • MITRE ATT&CK

More on GitHub

Loading repositories...

Skills

Security monitoring
SIEM, EDR, IDS/IPS, SOAR, alert monitoring, log analysis, threat detection, alert triage, Splunk, Wazuh, Azure Sentinel
Incident response
Incident triage, threat containment, malware, phishing, ransomware, DDoS, SOAR playbooks, IOC enrichment, MITRE ATT&CK, threat intelligence
Vulnerability management
Nessus, OpenVAS, Nmap, CVSS, risk assessments, security audits, remediation tracking
Network & systems
TCP/IP, DNS, HTTP/S, firewalls, Linux, Windows, Active Directory, AWS, Azure, Docker
Scripting & reporting
Python, Bash, PowerShell, Power BI, Excel, ITSM ticketing
Languages
English, Gujarati and Hindi (C2), German (B1), Japanese (A1)

Credentials

  • CEH v13EC-Council
  • Google Cybersecurity ProfessionalGoogle
  • Security Operations CenterIBM
  • Cybersecurity AnalystIBM
  • Jr Cybersecurity AnalystCisco
  • Certified Ethical HackerCisco
  • AWS Cloud Practitioner EssentialsAWS
Sep 2023 – May 2025

M.Sc., Cybersecurity & Forensics

Parul University · Vadodara
Jul 2020 – Aug 2023

B.Sc., Computer Science

University of Mumbai · Mumbai

Contact

mehtaniharhnd205@gmail.com