Open to opportunities

Debayan Saha

@debayansaha

Message

SOC analyst skilled in SIEM, incident response, and Azure security.

India

Message

What I'm looking for

I seek a SOC/incident response role focusing on SIEM engineering, threat hunting, automation, and cloud security within a collaborative, security-first team that values continuous improvement and measurable impact.

I am a result-driven Security Operations Center (SOC) Analyst with approximately three years of experience in cybersecurity operations, specializing in SIEM management, incident response, and threat hunting.

I have hands-on expertise with IBM QRadar, Azure Sentinel, and Microsoft Defender for real-time monitoring and containment, and I’ve developed SIEM use cases and automation that reduced false positives by 25%.

My day-to-day work includes alert triage, log analysis across firewalls, servers, O365 and Azure AD, threat enrichment mapped to MITRE ATT&CK, and executing first-line containment actions under defined SLAs.

I hold Microsoft certifications (AZ-104, AZ-400) and possess knowledge of ISO 27001 and GDPR; I contribute to SOPs, playbooks, KPI dashboards and incident documentation to improve SOC effectiveness.

Experience

Work history, roles, and key accomplishments

Current

Cyber Security Analyst

Current

Capgemini

Oct 2023 - Present (2 years 1 month)

Monitor IBM QRadar alerts and perform triage and first-line incident containment, reducing false positives by 25% through use-case tuning and automation. Maintain incident documentation, KPI dashboards, and SOPs while enriching alerts with threat intelligence mapped to MITRE ATT&CK.

QRadar Azure Sentinel Incident Response Threat Hunting PowerShell Python ServiceNow

Service Desk Analyst

Capgemini

Nov 2022 - Nov 2023 (1 year)

Provided Tier 1/2 support for Windows and Linux environments, handling Active Directory, patch management, software deployment, and ITSM ticketing to maintain service SLAs.