Aruna Kantu

I’m a SOC Analyst with 3.6 years of hands-on experience running 24×7 security operations and translating high-volume alerts into fast, accurate decisions. I’m expert in SIEM monitoring and threat detection using Splunk, Azure Sentinel, and CrowdStrike NG-SIEM.

I strengthen defenses through actionable incident response: triaging and investigating malware, ransomware, phishing, brute-force, lateral movement, and insider-threat alerts. I develop and fine-tune SIEM correlation rules and SOAR playbooks to automate tier-1 response actions and improve MTTR, while managing the full incident lifecycle in ServiceNow.

I also bring a strong threat intelligence edge—daily OSINT and dark/deep web monitoring for credential leaks, PII/PHI exposure, and brand abuse. Alongside identity and email security work (Microsoft Entra ID and Mimecast), I support vulnerability management and penetration testing using Qualys Guard VMDR, Nessus, Nexpose, Burp Suite, and NMAP, backed by my CSA v1 certification.