Sagar Jain

I’m a SOC Analyst (L2) with 2+ years of experience in 24/7 enterprise Security Operations Centers, focused on SIEM monitoring, threat detection, and incident response. I bring strong hands-on expertise in KQL investigations and Microsoft Sentinel with Microsoft Defender XDR.

In my current role as a Security Delivery Analyst at Accenture (Nov 2023–Present), I investigate phishing, malware, endpoint, identity, and cloud-based threats across SIEM and EDR/XDR telemetry. I run the incident response lifecycle end-to-end—identification, containment, eradication, and recovery—while leading high-severity incident bridge calls and providing remediation guidance.

I’m recognized multiple times by clients for impactful contributions to incident response activities. I create and deploy custom Microsoft Sentinel analytical rules using KQL and tune detections to reduce false positives (about a ~30% reduction), while also handling 50+ security alerts per shift with accurate prioritization and timely remediation.

I also strengthen the security program through operational rigor: ServiceNow incident ticket management with consistent 100% SLA compliance, Azure AD Conditional Access configuration review, and SOC SOP/runbook documentation and investigation reporting. My approach is grounded in MITRE ATT&CK mapping and clear SOPs so teams can respond faster, detect better, and maintain dependable service delivery.