Rahul Shrivastava

I'm a Cybersecurity Analyst and SOC professional with 3+ years of experience in security operations, incident response, penetration testing, and AI-assisted security automation.

In my day-to-day work, I triage 50–100 alerts across Splunk, Microsoft Sentinel, and Google Chronicle, and I've driven measurable outcomes — reducing false-positive rates by 20–40% and improving MTTR by up to 25% through SIEM tuning and triage playbooks I built from scratch. I've secured 200+ enterprise endpoints using Microsoft Defender, Fortinet, and Sophos, and delivered 16–30 penetration testing engagements across FMCG, e-commerce, and Web3 clients.

What sets me apart is that I don't just use security tools — I build them. My open-source projects include a dual-signal LLM alert triage system and a full incident orchestration pipeline with event correlation, explainable risk scoring, policy-as-code guardrails, and tamper-evident audit logging — all built with analyst judgment at the center, never automated away.