kiranc.me

Kiran Chandra

Senior Security Operations Engineer @ Capital One

At Capital One I run day-to-day security operations for a 14-analyst SOC and engineer the LLM agents that investigate cases, tune detections, and shorten response times.

  • Brooklyn, NY
  • GCIH · AWS Security Specialty
  • Incident response · Threat hunting · Detection engineering

~$ cat experience.log

Senior Security Operations Engineer

Capital One · New York, NY

2025-02 → present

  • Built an LLM-powered case investigation agent that ingests multi-source log data and generates structured case summaries, reducing average analyst case-close time by 65%.
  • Lead SOC operations for a team of 14 analysts, coordinating escalations and driving incident resolution.
  • Engineered a detection-tuning agent that queries Databricks case telemetry, JIRA allowlists, and a GitHub detection-as-code library to surface tuning opportunities, replacing ad-hoc tuning with a weekly cadence.
  • Execute proactive, intelligence-driven threat hunting with internal IOCs, successfully detecting authorized red-team activity across endpoint and log telemetry.
  • Leverage Koi across an 86K-endpoint environment to detect unapproved browser and IDE extensions and shadow AI tooling (Claude skills, MCP servers), driving remediation of 40+ critical security issues.

Security Operations Center Analyst

Capital One · McLean, VA

2023-08 → 2025-02

  • Triaged and resolved 1,000+ SOC cases end to end: investigation, enrichment, and escalation.
  • Rewrote and standardized SOC playbooks, improving incident handling across the team.
  • Partnered with software engineering teams on user acceptance testing and requirements validation for a new internal SOC case management system.

Help Desk Analyst

Your Tech Team LLC · Flemington, NJ

2022-09 → 2023-06

  • Provided IT support in a hospital environment; administered user accounts across Active Directory, VMware Horizon, and clinical systems.

Cybersecurity Intern

New York Life · Clinton, NJ

2022-06 → 2022-08

  • Automated email-security whitelist updates with Python, cutting malicious email by ~15%; analyzed and mitigated 100+ unique email threats using IronPort, Agari, and Anomali.

~$ ls -la ~/certs

Every badge links to its Credly credential page. Verify any of them.

~$ cat skills.txt

languages

  • Python
  • PowerShell
  • Java
  • SQL

stack

  • CrowdStrike
  • AWS
  • Elastic
  • Databricks
  • Proofpoint
  • VirusTotal
  • Wiz
  • Koi
  • Claude Code

~$ cat education.md

~$ ./contact.sh

> reach me on LinkedIn. genuinely happy to talk shop.

> curious how this site is built? see /security.

[process exited 0 · thanks for scrolling]