At Persistent Systems Limited, I detect and investigate security incidents across US and APAC enterprise environments using Splunk ES and CrowdStrike Falcon. I develop SPL searches and investigation dashboards to help analysts triage security events.
I work with detection engineering to fine-tune alert logic and reduce false positives. I also integrate CrowdStrike and Cyware threat intelligence into the SIEM and support playbook automation in Cortex XSOAR.
My investigations cover endpoint, network, and email threats. I use tools including Cisco AMP, Wireshark, Proofpoint, and KnowBe4 PhishER to examine suspicious activity, analyze phishing, and support remediation.
Previously, at Wipro Ltd (via Ornext Technology Solutions Private Limited), I monitored security events in QRadar, investigated endpoints with SentinelOne, and used Qualys to scan and prioritize vulnerabilities. I also prepared SOC health checks and root-cause analysis reports.
