Open to opportunities

Abhishek Chatterjee

@abhishekchatterjee1

India

Message

What I'm looking for

I’m looking for a SOC/SIEM-SOAR role where I can strengthen threat detection using MITRE ATT&CK and NIST CSF, automate investigations with PowerShell/Python, and own end-to-end incident response across cloud and identity environments.

Cyber Security professional with ~3 years of SOC experience at Accenture, specializing in SIEM/SOAR, threat detection, incident response, detection engineering, and cloud security. Hands-on experience with Microsoft Sentinel, Splunk, Google SecOps (Chronicle), Microsoft Defender for Cloud, Microsoft Entra ID, PIM, Avanan, Azure, and AWS.

Skilled in the complete incident response lifecycle, SIEM rule tuning, MITRE ATT&CK, NIST CSF, threat hunting, phishing investigations, and cloud security monitoring. Developed PowerShell automation for VirusTotal IOC enrichment and automated incident assignment, improving SOC efficiency. Reduced false positives by ~40% through detection tuning and correlation logic.

Experienced with ServiceNow, KQL, PowerShell, and security operations in 24x7 enterprise environments. Microsoft Certified: SC-200 and AWS Certified Cloud Practitioner. Seeking opportunities in SOC, Detection Engineering, Threat Hunting, or Cloud Security.

Experience

Work history, roles, and key accomplishments

Current

Security Managed Services Analyst

Current

Accenture

Sep 2025 - Present (10 months)

Handled end-to-end security incident response and log analysis using Microsoft Sentinel, including investigation, triage, containment, eradication, and recovery. Built SIEM automation and detection rules aligned to MITRE ATT&CK and NIST CSF, and performed phishing/malicious email investigations.

CSPM Incident Response Threat Detection SIEM Rule Tuning NIST CSF PowerShell VirusTotal API IP Blocking Automation Phishing Avanan Threat Hunting Vulnerability Analysis Log Analysis

Security Delivery Associate

Accenture

Nov 2023 - Aug 2025 (1 year 9 months)

Monitored and triaged 100+ daily security alerts in Splunk as part of a 24/7 SOC, escalating confirmed incidents according to runbooks while maintaining SLA adherence. Investigated authentication and privileged access activity using Microsoft Entra ID and PIM logs, and improved detection accuracy via correlation rules and dashboards in Splunk.