Looking for a job

Nisarg Soni

@nisargsoni

Message

I am a Security Operations Analyst skilled in threat detection, incident response, and SIEM engineering.

Canada

Message

What I'm looking for

I want to work in a SOC environment where I can run proactive threat hunting, improve SIEM detections, and own incident response workflows end-to-end. I’m especially interested in security engineering, automation, and Azure-focused log and detection improvements.

I’m a Security Operations Analyst with hands-on experience in threat detection, incident response, and SIEM engineering across Microsoft Sentinel and ReliaQuest GreyMatter XDR. I use proactive threat hunting with the MITRE ATT&CK framework to identify lateral movement and advanced threats.

At Moneris, I manage end-to-end incident lifecycles—triage, severity classification, containment, root-cause analysis, and post-incident documentation—while tuning detections to reduce false positives and improve signal-to-noise. I also support Azure security operations (data collection rules, Arc integration, and Sentinel connectors) and onboard 5+ new log sources into Microsoft Sentinel to expand detection coverage.

I bring complementary endpoint administration and IT support experience from roles including Desktop Support Intern and Service Desk Technician Intern, including zero-trust aligned access work with Microsoft Intune and Entra ID. I’m security operations–minded, automation-focused (Python for SOC metrics and threat lookups), and grounded in certifications including CompTIA CySA+, Security+, and Microsoft SC-200.

Experience

Work history, roles, and key accomplishments

Current

Security Operations Analyst II

Current

Moneris

Feb 2025 - Present (1 year 5 months)

Monitor and investigate security alerts across Microsoft Sentinel and Defender/ReliaQuest GreyMatter XDR, performing MITRE ATT&CK-based threat hunting. Lead incident lifecycle activities (triage through containment and root-cause analysis), tune detections, and support SOC automation and log onboarding.

Desktop Support Intern

Magnet Forensics

Sep 2024 - Dec 2024 (3 months)

Provide end-user IT support across Windows, macOS, and SaaS applications while administering endpoints using Microsoft Intune and Entra ID. Support device lifecycle activities and documentation in an Agile Scrum environment using Jira and Confluence.

Service Desk Technician Intern

Waterloo Regional Police Service

Sep 2023 - Dec 2023 (3 months)

Serve as a primary point of contact for organization-wide MDM transition to Microsoft Intune, ensuring enrollment, configuration, and compliance. Provide front-line IT support, manage asset/inventory registration, and document helpdesk activities and incident handling procedures.

Microsoft Intune Help Desk Asset Inventory Asset Registration Documentation Teams Admin Center Data Export IT Technical Support

Systems Engineer

Tata Consultancy Services

Sep 2020 - Dec 2022 (2 years 3 months)

Build and configure Creatio CRM workflows to automate business processes, and translate client requirements into low-code/no-code implementations. Support end users by resolving tickets on YouTrack and conduct regression and system testing with documented test cases.

Creatio Workflow Automation Low Code No Code BPM (Creatio)Regression Testing System Testing YouTrack Ticket Management end user support