At Zoetis, I monitor and investigate security events in a 24×7 Global SOC, responding to incidents involving malware, phishing, ransomware, and identity threats. I use CrowdStrike Falcon EDR and CrowdStrike NG-SIEM to assess endpoint telemetry, user activity, and incident scope.
I also conduct threat hunting and forensic investigations, using MITRE ATT&CK to map adversary techniques and reconstruct incident timelines. For phishing investigations, I analyze email details and authentication controls including SPF, DKIM, and DMARC.
At Zoetis, I developed AI-powered security agents to automate investigation workflows and integrated SIEM capabilities with SOAR workflows to enrich alerts and automate repetitive tasks. I also work on vulnerability management and fine-tune detection rules and use cases.
Previously, at HCLTech, I monitored enterprise environments with Splunk SIEM and IBM QRadar. I improved alert triage efficiency by 30%, reduced false positives by 25%, and strengthened email security through DMARC, DKIM, and SPF implementation.
