Skip to content
RYRichesh YadavSECURITY OPS → AI SECURITY

SECURITY OPERATIONS CONSULTANT

RicheshYadav.

I investigate security incidents, lead phishing response, and coordinate endpoint containment — and I'm building toward AI and LLM security with hands-on AI development experience.

See the workStart a conversationDownload resume
OPEN TOGenerative AI Security ConsultantPrompt & LLM Security ArchitectCloud AI Security SpecialistAI Governance & Compliance Lead
SCROLL TO WARP THE FIELD

AT A GLANCE

Quick facts & capabilities

Richesh Yadav is a security operations consultant at Atos Group (Eviden) who investigates security incidents, runs phishing response, coordinates endpoint containment, and turns findings into clear, decision-ready reports.

ROLE
Security Operations Consultant at Atos Group (Eviden)
EXPERIENCE
4+ years in security operations (since Feb 2022)
CORE WORK
Incident investigation · Phishing response · Endpoint containment · SIEM · Reporting
PLATFORMS
IBM QRadar · Microsoft Sentinel · Microsoft Defender · CrowdStrike Falcon · Carbon Black · Trellix
CERTIFICATIONS
CompTIA Security+ (SY0-601) (2023) · AWS Certified Cloud Practitioner (2024)
LOCATION
Pune, Maharashtra, India
CURRENT FOCUS
AI security — OWASP LLM guidance and MITRE ATLAS

WHAT I DO

Six disciplines.
One response workflow.

Each technical term comes with a plain-language explanation, so anyone — or any assistant — can tell exactly what the work involves.

  1. 01

    Security monitoring (SIEM)

    Watching security alerts and system logs to spot activity that needs a closer look.

    • IBM QRadar
    • Microsoft Sentinel
    • Microsoft Defender
    • Threat intelligence
  2. 02

    Incident investigation

    Following the evidence behind an alert to decide whether it is a real threat.

    • IOC analysis
    • Endpoint investigation
    • Recorded Future
    • Escalation
  3. 03

    Phishing response

    Confirming whether a suspicious email is malicious and containing the damage if it is.

    • Email analysis
    • Microsoft Defender
    • User impact review
  4. 04

    Endpoint containment (EDR)

    Isolating an affected computer so a threat cannot spread, with proper authorisation.

    • CrowdStrike Falcon
    • Carbon Black
    • Host quarantine
  5. 05

    Data loss prevention (DLP)

    Reviewing and handling authorised requests around rules that stop sensitive data leaving.

    • Trellix
    • Policy exceptions
    • Data-owner coordination
  6. 06

    Security reporting

    Turning incidents and alert trends into clear reports that leaders can act on.

    • Monthly matrix reporting
    • Investigation write-ups
    • Stakeholder updates