kuldeep it

I’m an L2 SOC Analyst with 2+ years of enterprise security operations experience, focused on threat detection, incident response, and SOAR automation for a Fortune 500 retail client. I work primarily in Microsoft Sentinel and Microsoft Defender XDR to turn security signals into faster, more accurate action.

I’ve driven measurable outcomes by reducing MTTR by 35% and false positives by 30% through advanced KQL detection engineering. From phishing investigation and malware triage to IOC/IOA analysis and MITRE ATT&CK-driven threat hunting, I make sure incidents are investigated with strong evidence and clear next steps.

I’m hands-on with end-to-end response: triaging 50+ alerts per month, performing root-cause analysis via KQL log correlation, and executing containment/remediation such as device isolation, forced password resets, session revocation, and MFA enforcement. I also continuously tune analytic rules for tactics like lateral movement, privilege escalation, persistence, and PowerShell abuse, while enriching detections with threat intelligence feeds and maintaining SOC runbooks and playbooks—backed by an SC-200 certification.