Sachin Bisht

Serve as the primary L2 escalation point in a 24/7 rotational shift environment, owning end-to-end investigations for high-priority incidents and mentoring Tier-1 analysts. Monitor and investigate security alerts within Azure Sentinel, specializing in UEBA, DLP, sign-in anomalies, and BEC, while administering SentinelOne and Carbon Black EDR platforms.

Acted as an L2 escalation handler for L1 analysts, independently investigating and resolving moderate-to-complex security incidents across endpoint, network, and identity vectors. Monitored and correlated security events across Splunk SIEM, CrowdStrike Falcon, and SentinelOne EDR platforms, and proactively hunted for indicators of compromise and adversary TTPs.

Operated within a multi-tenant enterprise MSSP environment, monitoring real-time security events across Azure Sentinel, ELK SIEM, and CrowdStrike EDR, including AWS cloud logs. Supported compliance readiness, evaluated third-party vendor security postures, and managed vulnerability and network security programs using Nessus, Proofpoint, and Cisco Umbrella.

Monitored security alerts using CrowdStrike Falcon and SentinelOne while learning vulnerability management and SOC tools.

Conducted continuous security monitoring and anomaly detection for gaming environments, tracking user behavioral patterns to identify policy violations, unauthorized access, and system exploits. Handled initial triage of user reports and security events, escalating confirmed security exploits according to operational protocols.

Provided customer-facing technical support and hands-on hardware/network troubleshooting for client electronic devices, including routers, mobile devices, and networking equipment.

Completed a Bachelor of Science in Physical Science with a focus on Computer Science from Shivaji College, University of Delhi from 2017 to 2020.

Earned the SentinelOne Incident Response Engineer (SIREN) certification, issued in October 2025 and valid through October 2026.