At Tietoevry India Pvt Ltd, I work incidents across phishing, identity, MFA fatigue, and endpoint alerts using ReliaQuest GreyMatter and ServiceNow. I handle phishing and impostor emails end to end, tracing messages, checking who opened them, and removing malicious messages from inboxes.
When I investigate possible account compromise, I review Entra ID sign-in logs, devices, MFA methods, and forwarding rules. For confirmed compromises, I reset passwords, revoke sessions, and remove attacker devices.
I write Google SecOps queries to investigate brute force and password spraying, and use PowerShell to unlock affected users in bulk. I also investigate endpoint alerts, remove malicious files through CrowdStrike RTR, and block indicators with the required change request and ticket evidence.
On the Fruit-Store-Pentest project, I built a Flask e-commerce app and exploited 13 vulnerabilities across 10+ OWASP Top 10 categories, then fixed each issue with a PoC, CWE, and root cause. I also built Sensitive-Data-Guard, a Chrome extension with a FastAPI backend that warns users before they paste sensitive data into web forms or chat tools.
