About
Proactive SOC Analyst with 3+ years of experience delivering measurable impact in 24/7 security operations, threat hunting, and incident response across hybrid environments. Proven expertise in detection engineering, MITRE ATT&CK alignment, and advanced threat investigations using Sentinel, Defender, and Vectra AI, enhancing detection accuracy and streamlining IR processes. Successfully slashed alert fatigue by 30%, blocked over 100 phishing campaigns, and reduced incident response times by 35%, while also mentoring SOC teams to operational excellence.
Work
Bangalore, Karnataka, India
→
Summary
Led 24/7 security operations and incident response for a key client, ensuring robust threat detection, analysis, and containment across hybrid environments.
Highlights
Investigated over 100 security incidents monthly (malware, phishing, brute-force, insider threats) with 100% SLA compliance, ensuring rapid containment and reducing mean time to resolution by 35%.
Automated phishing triage using Sentinel and Defender, blocking 100+ malicious URLs and 80+ phishing campaigns, which reduced user click rate by 40% and overall user impact by 50%.
Engineered and mapped 30+ detection rules to MITRE ATT&CK and Cyber Kill Chain, boosting threat coverage by 20% and improving detection accuracy while cutting false positives by 30%.
Performed endpoint forensics and isolated infected systems via Defender Live Response, decreasing attacker dwell time by 30% and preventing lateral movement across the network.
Trained and mentored junior SOC analysts on Sentinel dashboards, triage workflows, and phishing investigation SOPs, reducing onboarding time by 50% and improving shift handover efficiency.
Awards
Capgemini "Extra Mile” Award
Awarded By
Capgemini India Pvt. Ltd.
Awarded for delivering proactive improvements beyond key performance indicators (KPIs).
Client Recognition Award
Awarded By
Emirates Global Aluminium (EGA)
Recognized for reducing triage time by 40% and exceeding service level agreement (SLA) targets.
Skills
SIEM & SOAR Tools
Microsoft Sentinel, RSA NetWitness.
Endpoint & Network Security
Microsoft Defender for Endpoint, Vectra AI, Palo Alto NGFW, Snort, Microsoft Live Response, Wireshark, PCAP Analysis.
Threat Detection & Investigation
MITRE ATT&CK Framework, Cyber Kill Chain, UEBA, IOC Enrichment, Purple Teaming, Threat Intelligence, TTP-Based Detection.
Phishing & Email Security
Phishing Triage, Header Analysis, URL Scan, MX Toolbox, IP Void, Proxy & Domain Blocking.
Incident Response & RCA
Root Cause Analysis (RCA), Containment & Remediation, NIST IR Framework, Live Forensics, ServiceNow Ticketing.
Automation & Scripting
PowerShell, Postman API, Custom Log Ingestion, SOAR Playbooks.
Vulnerability & Exposure Management
Tenable Nessus, Threat Feed Integration, Attack Surface Reduction (ASR) Rules.