Praveen Godi

I’m a cybersecurity analyst with 4 years of SOC experience, triaging 60–100 security alerts daily across enterprise environments while maintaining 90%+ SLA compliance on P1/P2 incidents. I focus on fast, accurate investigation and clear escalation paths to protect critical systems.

I’ve built and tuned SIEM correlation rules in Splunk and IBM QRadar, cutting recurring false-positive alerts and improving analyst focus on true threats. Using MITRE ATT&CK–mapped threat hunting, I’ve identified lateral movement and privilege escalation attempts before they mature into full incidents.

My day-to-day work spans endpoint, email, and cloud security. I investigate and respond with CrowdStrike Falcon and Microsoft Defender for Endpoint, handle phishing end-to-end through Proofpoint and Mimecast gateways, and review AWS CloudTrail/CloudWatch logs to flag unauthorized API activity and misconfigurations.

I also automate repetitive SOC workflows (enrichment, ticket triage, reporting) with Python and PowerShell, including KQL-based hunts in Microsoft Sentinel for anomalous sign-in patterns and potential data exfiltration. I’m currently progressing toward the Microsoft SC-200 (Security Operations Analyst) certification to deepen my detection and operations capabilities.