Looking for a job

Ritik Agrawal

@ritikagrawal

SOC Analyst at Tata Consultancy Services who investigated 100+ incidents per quarter and cut false positives by 30%.

At Tata Consultancy Services (TCS), I triage and investigate security alerts in Sentinel and QRadar, identifying true positives and tuning detections to reduce false positives by 30%.

I handle investigations into phishing, malware, suspicious logins, and brute-force attacks. For more than 100 incidents per quarter, I determine scope and indicators of compromise and guide remediation.

I use Microsoft Entra ID to contain compromised accounts and Microsoft Defender to investigate endpoints, initiate scans, and isolate impacted devices. I also maintain block lists and write KQL queries and analytic rules.

I document incident timelines in ServiceNow, perform SIEM health checks, and apply MITRE ATT&CK mapping in investigations. I coordinate remediation with partner teams and provide incident updates and guidance.

Experience

Work history, roles, and key accomplishments

Current

SOC Analyst (L1 & L2 Security Operations)

Current

Tata Consultancy Services

Feb 2022 - Present (4 years 8 months)

Triaged and investigated 50+ daily alerts by correlating SIEM, EDR, and identity logs in Sentinel and QRadar, achieving a 95% true-positive identification rate and reducing false positives by 30% through detection tuning and whitelist refinement. Owned end-to-end investigations for 100+ incidents per quarter, determining root cause, scope, and IOCs and guiding remediation.