Loading

Cybersecurity Graduate | Information Security Analyst

Prem Kumar Santhanam

SOC Specialist | Cloud Security | Threat Analysis

About Me

I’m Prem Kumar Santhanam, a Security Engineer who enjoys understanding how systems work, where they can fail, and how to make them safer. Over the past three years, I’ve worked across cloud security, identity and access management, vulnerability assessment, and threat detection. That experience has shaped how I approach security: understand the environment, question assumptions, and build controls that people can actually use.

I’m particularly interested in the intersection of cloud infrastructure, automation, and security operations. I like turning complex findings into clear priorities and repetitive tasks into reliable workflows. Whether I’m investigating an alert, building a tool, or exploring a research question, I value careful analysis, clear communication, and continuous learning. My goal is to help teams build and operate securely without losing sight of the people and business behind the technology.

3+
Years Experience
10+
Projects Completed
10+
Vulnerabilities Found
7+
Judging & Mentorship
5+
Research Papers

Skills & Technologies

Programming Languages05

Python Bash PowerShell SQL Go

Security Tools06

Splunk SentinelOne Fortinet Crowdstrike Wireshark ArmorCode

Frameworks & Standards06

OWASP Top 10 NIST 2.0 ISO 27001 MITRE ATT&CK PCI-DSS CIS

Cloud & Infrastructure05

AWS Security Azure Security GCP Security Purple AI Microsoft Defender

Architecture05

Zero Trust Defense-in-Depth Micro-segmentation CASB concepts API security

Professional Experience

September 2026 - Current
New Jersey, United States

Cybersecurity Analyst

Lovern Technologies & Cyber Genie
  • Triaged and investigated security alerts across Splunk, ArmorCode, email security, and Purplelens AI, owing escalated cases end to end that contains threats enough endpoint isolation and identity account lockdown, collecting evidence, and delivering root cause analysis with preventive recommendations.
  • Partnered with senior engineers to tune SIEM and EDR rules, suppress noisy alerts, and improve detection use cases, reduing false positive by 75% and MTTR by 70%. Supported Tier 1 analyst through investigations and feedbacks.
  • Delievered incident reports, case timelines, and monthly client reports that turned findings into business recommendations.
Jun 2022 - July 2024
Chennai, India

Security Engineer

EC Groups
  • Brought up 90% risk-free deployment by conducting regular internal and external vulnerability scans. Collaborate with cross-functional teams and developed customized alerts that detect security events and anomalies. Performing in-depth audits on Identity and Access Management controls ensuring strict customized security policies and practices
  • Crafted documentation to improve workflow and collaborated with stakeholders on audit outcomes, recommended measures and guidance on access control. Administered and managed security tools and technologies, including firewalls, intrusion detection/prevention systems (IDS/IPS), and endpoint protection solutions
  • Represent the Offshore team in the status and client calls, share weekly status reports with the client and also assist in understanding the entire security remediation during SSDLC cycle and help them in addressing the security loopholes in the application
Mar 2023 - Current
Remote

Co-Founder & Course Director

Team Developers
  • I serve as Course Director at Team Developers, a four-person team providing student training across Cybersecurity, Photoshop, Data Science, Law, and Computer Science. My work brings together course coordination, student learning, and research support, helping students develop their skills and communicate their ideas through academic writing and conference participation.
  • Alongside training, we assist students with research paper preparation, publication submissions, and conference-related work. Our focus is on clear instruction, practical learning, and constructive support throughout the learning and research process.
Aug 2021 - May 2022
Chennai, India

Application Security Intern

Team Developers
  • Conducted comprehensive cybersecurity risk assessments for microbusinesses and public-sector clients. Identifying security gaps across networks, endpoints, identity management, and cloud environments. Performing threat modeling and vulnerability analysis aligned with NIST and industry best practices. Developed tailored security frameworks and mitigation strategies based on business risk and budget constraints.
  • Assisted in analyzing security controls related to access management, network security, and incident response readiness. Researching emerging threats, attack techniques, and defensive technologies to support client recommendations Created professional security reports and deliver clear, actionable findings to non-technical stakeholders. Collaborated in team-based environments simulating real-world security operations and consulting workflows.

One of my finest specialties

Network Attacks

Authorized network penetration testing to uncover exposed services, weak segmentation, and exploitable vulnerabilities. Using Nmap, Wireshark, Nessus, and Metasploit, I assess attack paths and lateral movement risks, then recommend practical remediation.

  • Network Scanning
  • Vulnerability Assessment
  • Segmentation Testing
  • Packet Analysis
  • Lateral Movement

Password Attacks

Authorized password security assessments using Hashcat, John the Ripper, and Hydra to evaluate credential strength and authentication controls. Testing covers password policies, controlled brute-force attempts, account lockout, and MFA to reduce account takeover risks.

  • Password Auditing
  • Credential Security
  • BruteForce Testing
  • MFA Validation
  • Account Lockout

Website Attacks

Authorized web application testing using Burp Suite, OWASP ZAP, and browser developer tools to identify SQL injection, XSS, broken access control, and authentication flaws. Assessments follow OWASP Top 10 guidance and provide prioritized fixes for safer applications.

  • OWASP Top 10
  • SQL Injection
  • XSS
  • SSRF
  • Access Control
  • Authentication Testing
  • Wordpress

Server Attacks

Authorized server security assessments using Nessus, Nmap, and Metasploit to identify missing patches, exposed services, misconfigurations, and privilege escalation risks. I review access controls and hardening baselines, then provide actionable remediation guidance.

  • Server Hardening
  • Patch Assessment
  • Misconfiguration Detection
  • Privilege Escalation
  • Remediation

Education

Master of Science in Cybersecurity

Pace University
2026New York City, NY
GPA3.75 / 4.0
Specialization: Cybersecurity and Information Security
Research Focus: Passwordless Authentication
On-going research on Pattern Aware Threat Detection and Prevention with Cryptographic Authentication

Bachelor of Technology in Cybersecurity

SRM University, Chennai
2024India, IN
GPA3.85 / 4.0
Major in Cybersecurity
Contribution: Singularity XDR - SOC Platform
Cybersecurity Club President & BIS Club Vice President

Featured Projects

Research & Publications

Blog

Future Plans & Goals

Education

PhD in Cybersecurity

Planning to pursue doctoral research in AI-powered security systems and autonomous threat response

2029
Certification

Sec+ Certification

Offensive Security Certified Professional - Advanced penetration testing certification

Q4 2026
Project

Open Source Security Tool

Developing a comprehensive open-source security toolkit for SMBs with limited security budgets

2026-2027
Professional Development

Security Conference Speaker

Present research findings at DEF CON and Black Hat conferences

2025 - PRESENT

Contact Me

Contact