Open to opportunities

Penmetcha Pankaj

@penmetchapankaj

Message

I’m a SOC Analyst specializing in threat detection, incident response, and detection engineering with SIEM and XDR.

Canada

Message

What I'm looking for

I’m looking to deepen detection engineering, threat hunting, and incident response in a fast-paced SOC, leveraging Microsoft Sentinel, XDR, and automation to reduce MTTR and improve detection coverage.

I’m a SOC Analyst with 2+ years of experience in Security Operations Center work, focused on threat detection, threat hunting, incident response, vulnerability management, and detection engineering. At WorkSafeBC, I engineered 40+ Microsoft Sentinel analytics rules and hunting queries—improving detection coverage by 32%—and I conducted ATT&CK-aligned hunting using Microsoft Defender XDR, Sentinel, endpoint telemetry, and threat intelligence.

I lead end-to-end incident response across 1,000+ endpoints, reducing MTTR by 40%, and I perform attack path analysis and vulnerability validation across Windows, Linux, Azure, and cloud workloads—supporting remediation of 90% of critical vulnerabilities. I also build automated investigation and response playbooks with Splunk SOAR and Cortex XSOAR to cut analyst triage effort by 30%, while authoring procedures and standards aligned with NIST 800-61 and MITRE ATT&CK.

Experience

Work history, roles, and key accomplishments

SOC Analyst

WorkSafeBC

Jul 2024 - Jan 2026 (1 year 6 months)

Engineered 40+ Microsoft Sentinel analytics rules and ATT&CK-aligned hunting queries to improve detection coverage. Led end-to-end incident response across 1,000+ endpoints and reduced MTTR by 40%, supporting vulnerability validation and automated investigation/response playbooks.

SentinelOne Detection Engineering Threat Hunting Incident Response Threat Intelligence Recorded Future Azure DNS Telemetry Vulnerability Management

Analyst

Wipro

Sep 2021 - Jul 2022 (10 months)

Investigated and triaged 100+ security alerts daily across IBM QRadar, CrowdStrike Falcon, and Microsoft Defender while maintaining 99% SLA compliance. Tuned QRadar detection content and correlation rules to reduce false positives by 45% and supported phishing/malware and DLP incident investigations using Forcepoint.

QRadar Microsoft Defender Correlation Rules Log Analytics Malware Analysis Endpoint Compromise Investigations Forcepoint DLP Investigations

Education

Degrees, certifications, and relevant coursework

New York Institute of Technology

Master of Science, Cybersecurity

Activities and societies: Final Year Project: Android Application Penetration Testing for Fatigue Science (black-box testing, reverse engineering, vulnerability triage, remediation consulting).

Master of Science in Cybersecurity. Final year project focused on Android application penetration testing for Fatigue Science.