Open to opportunities

Munna A

@munnaa

Message

Senior cybersecurity consultant specializing in SIEM, incident response, and cloud security.

India

Message

What I'm looking for

I seek a security role where I can lead SIEM and SOC operations, build automated incident response, collaborate with engineering teams, and advance cloud-native security practices in a proactive, learning-focused environment.

I am a senior cybersecurity consultant with 4+ years of hands-on experience in SIEM implementations, SOC operations, endpoint security, IDS/IPS, and cloud security. I specialize in incident handling, threat detection, log analysis, and coordinating vulnerability and patch management across Windows and Linux environments.

My experience includes deploying and operating SIEM platforms such as Microsoft Sentinel and Splunk, using EDR solutions like Microsoft Defender and CrowdStrike, and managing firewalls (Palo Alto, FortiGate) and AV tools. I have led 24/7 SOC incident response, conducted forensic investigations and root cause analysis, and operated within SLA-driven processes using tools like ServiceNow.

I have delivered Azure security assessments, automated incident response playbooks in Sentinel, and tailored security plans for clients to meet internal and regulatory standards. I communicate findings to stakeholders, run security awareness sessions, and drive remediation and continuous monitoring to reduce risk and improve security posture.

Experience

Work history, roles, and key accomplishments

Current

Senior Consultant

Current

LTI Mindtree

Apr 2024 - Present (1 year 6 months)

Led security monitoring and incident response on Azure using Microsoft Sentinel and Defender for Endpoint, conducting assessments and automations that improved incident handling efficiency. Developed tailored security plans and coordinated patching and remediation with technical teams to maintain compliance.

Azure Sentinel Microsoft Defender SIEM Incident Response Vulnerability Management EDR (CrowdStrike Cloud Security Log Analysis

Senior Associate

Information Technology

Jul 2022 - Oct 2022 (3 months)

Monitored and analysed security events across Azure, Google Cloud and on-prem servers in a 24/7 SOC using SIEM and EDR tools, conducting RCA and ensuring incident resolution within SLAs. Managed incident investigations, ticketing in ServiceNow, and produced compliance reports.

Splunk CrowdStrike)EDR SIEM Forensics ServiceNow Cloud Security Incident Management

Security Analyst

Information Technology

Jul 2019 - Mar 2022 (2 years 8 months)

Worked directly with Microsoft customers to resolve security and technical issues, performed vulnerability assessments and coordinated patch management while monitoring SIEM platforms to detect and investigate breaches. Conducted security awareness sessions and produced incident reports for stakeholders.