At CyberPWN Technologies Pvt Ltd., I monitor and investigate cloud, endpoint, identity, and network security alerts using Microsoft Sentinel and SentinelOne EDR. I analyze security logs and endpoint telemetry to validate incidents and determine appropriate response actions.
I also conduct IOC- and IOA-based threat hunts, and develop detection queries in Kusto Query Language to identify suspicious activity. I document incidents in Jira and map attacker behavior to the MITRE ATT&CK framework.
In my SOC homelab project, I built a virtual environment simulating enterprise Windows and Linux systems, configured Splunk for centralized log monitoring, and created detection rules and dashboards for suspicious activity.
