pavan User

I’m a Security Analyst with 5+ years of hands-on experience in Information Security. I focus on turning security telemetry into fast, repeatable actions—using SIEM/SOAR, endpoint security, and strong investigation workflows.

At Capgemini (Bangalore), I’ve been implementing and fine-tuning SOAR playbooks and automation rules in Microsoft Sentinel. I integrated Microsoft Sentinel with Microsoft Defender XDR, Defender for Endpoint, Office 365, Azure AD (Entra ID), and Azure Logic Apps, and I build custom detection use cases using SPL and KQL.

I also own key parts of the security stack: administering endpoint health checks and vulnerability reporting, supporting and troubleshooting Splunk SIEM correlation searches, and running vulnerability scanning to generate automated reports. I’ve managed Office 365 email security for both on-premises and cloud environments, including phishing and malware email analysis with indicator handling (allow list/block list) based on IOCs.

Previously at Quess Corp Limited (Client: Samsung), I managed endpoint agents across Windows and Linux, handled in-depth investigations in the Defender portal, and supported governance through Intune compliance policies and ASR rules. I also guided juniors through KT sessions and helped coordinate responses using threat actor identification with Mitre ATT&CK—while strengthening IAM using PIM/PAM, RBAC, and Entra ID.