Looking for a job

Nana Tabatadze

@nanatabatadze

SOC Analyst at CAI, Inc. investigating security alerts and hunting threats with KQL.

At CAI, Inc., I investigate and triage security alerts across endpoint, identity, cloud, and email environments. I use CrowdStrike Falcon, Microsoft Defender XDR, and Microsoft Sentinel to investigate threats, analyze phishing campaigns, and reduce false positives.

I also perform proactive threat hunting with KQL, investigate IOC matches and authentication anomalies, and document findings and response actions in ServiceNow. In earlier SOC Analyst roles at VD Logistic and on a freelance/contract basis, I monitored SIEM alerts, investigated logs, and supported incident response.

Experience

Work history, roles, and key accomplishments

Current

SOC Analyst

Current

CAI, Inc.

May 2025 - Present (1 year 5 months)

Investigate and triage security alerts across endpoint, identity, cloud, and email environments using CrowdStrike Falcon, Microsoft Defender XDR, and Microsoft Sentinel. Analyze phishing campaigns, malicious attachments, and suspicious URLs using sandbox and email header analysis.

CrowdStrike Falcon Cloud Security Defender XDR Microsoft Sentinel KQL Phishing Analysis Email Header Analysis Sandbox Incident Response ServiceNow Threat Hunting

SOC Analyst

Freelance

Jan 2023 - Dec 2025 (2 years 11 months)

Provided SOC analyst services to multiple clients, performing alert triage, phishing investigations, endpoint analysis, and threat hunting. Delivered incident reports and remediation recommendations.

Alert Triage Email Phishing Investigation Endpoint Analysis Threat Hunting Incident Reporting remediation

SOC Analyst

VD Logistic

Jan 2022 - Dec 2023 (1 year 11 months)

Monitored SIEM alerts and performed initial threat validation and escalation. Investigated endpoint, network, and authentication logs for suspicious behavior.

SIEM Threat Validation Endpoint Analysis Network Analysis Authentication Logs Incident Response