raja sekhar

I've led centralized SOC monitoring at Cyara Operations, bringing security, cloud, infrastructure, and application telemetry into Grafana Cloud and Loki. I implemented StackStorm and AI-assisted automation for triage, false-positive suppression, alerting, and risk-based escalation, reducing manual operational effort by approximately 70%.

At Interra Information Technologies, I managed P1/P2 incident response from detection through containment, eradication, recovery, and RCA. I investigated threats through IOC/TTP analysis, threat hunting, patient-zero identification, blast-radius assessment, and coordinated actions such as endpoint isolation, account disablement, IOC blocking, and credential resets.

I've built SIEM integrations, onboarded and normalized logs, developed correlation rules and MITRE ATT&CK mappings, and connected SIEM platforms with SOAR and ticketing tools for enriched, automated response.

My background also includes SOC analysis and network security engineering across Microsoft Sentinel, Splunk, QRadar, endpoint protection, DLP, vulnerability management, firewalls, email security, and cloud security.