Looking for a job

Akshat Mehta

@akshatmehta

Message

I build and tune SIEM/XDR detections that reduce false positives and accelerate incident response.

India

Message

What I'm looking for

I'm looking to build and improve detection, SIEM/XDR, incident-response, and cloud-monitoring capabilities where I can reduce false positives and strengthen security operations.

At EY, I engineer and tune Splunk SIEM detections mapped to MITRE ATT&CK, reducing false-positive alert volume by 28% and improving detection accuracy.

I maintain Splunk infrastructure, dashboards, correlation searches, alerts, and SPL-based search models while monitoring ingestion, storage, indexing, and telemetry health. This work reduced Mean Time to Detect by 20%.

Previously at Dev IT and JerseySTEM, I investigated high volumes of security alerts, handled escalated incidents, configured Microsoft Sentinel and Cortex XDR, and supported vulnerability management with Tenable Nessus.

I bring 4+ years of Blue Team, detection engineering, incident response, cloud monitoring, threat hunting, and security automation experience across enterprise and customer environments.

Experience

Work history, roles, and key accomplishments

Current

Security Engineer

Current

May 2026 - Present (4 months)

Engineered and tuned 40+ Splunk SIEM detection rules mapped to MITRE ATT&CK, reducing false positives by 28% and MTTD by 20%. Administered Splunk infrastructure and built enterprise dashboards and correlation searches.

Splunk SPL SIEM Detection Engineering Dashboarding Correlation Searches Capacity Planning Telemetry MTTD Reduction

Sr. Security Analyst

Dev IT

Feb 2025 - Mar 2026 (1 year 1 month)

Investigated 100+ monthly security alerts using Microsoft Sentinel, Cortex XDR, ThreatX, and OSSEC HIDS, reducing incident response time by 5%. Created and tuned detection rules, supported 150+ customer environments, and led vulnerability assessments with Tenable Nessus.

Cortex XDR ThreatX Palo Alto NGFW Nessus Vulnerability Assessment Incident Response Oracle RightNow

Cybersecurity Engineer

JerseySTEM

Jan 2023 - Jan 2025 (2 years)

Deployed and maintained Microsoft Azure Sentinel workspaces, improving incident response efficiency by 15%. Administered Tenable vulnerability management and configured Cortex XDR workflows, accelerating incident resolution by 33%.

Azure Sentinel Tenable Vulnerability Management Cortex XDR EDR SIEM Incident Response Security Engineering