Open to opportunities

Sahil Raja

@sahilraja

Message

I am an experienced SOC engineer specializing in Microsoft Azure security, incident response, and automation.

Germany

Message

What I'm looking for

I seek a hands-on SOC or security engineering role focused on Microsoft Azure security, incident response, automation, and mentorship within a collaborative, improvement-focused SOC.

I am a SOC-focused cybersecurity engineer with deep hands-on experience in the Microsoft Azure security stack and 24/7 security operations. I specialize in incident response, security monitoring, and improving detection coverage across cloud and endpoint environments.

I manage Microsoft Sentinel and Microsoft 365 Defender XDR, build and fine-tune detection rules, and design automation playbooks and policies to streamline incident response and meet SLA targets. I lead incident handling workflows and collaborate with vendors to optimize security configurations.

I drive engineering improvements including vulnerability management, analytical rule creation, Azure Monitor integration, and AI-assisted analysis using Azure AI Foundry for advanced log analysis and threat correlation. I use Python for automation, scripting, and process improvement to reduce manual toil.

I hold industry certifications (AZ-500, SC-200, CEH, CCNA) and have a track record of mentoring junior analysts and improving SOC processes. I seek opportunities where I can apply technical leadership, continuous improvement, and hands-on Azure security engineering.

Experience

Work history, roles, and key accomplishments

Current

Cybersecurity Engineer

Current

Eschbach GmbH

Mar 2025 - Present (5 months)

Manage Microsoft Sentinel and Microsoft 365 Defender XDR, building detection rules, custom playbooks, and policies to streamline incident response and threat detection. Lead 24/7 incident response operations and leverage Azure AI Foundry to train LLMs for advanced log analysis and threat correlation.

Microsoft 365 Defender Azure AI Foundry Detection Engineering Incident Response Vulnerability Management Automation)Threat Hunting SIEM

SOC Analyst (On-Call)

Abtis GmbH

Jun 2024 - Apr 2025 (10 months)

Operated 24/7 SOC duties using Microsoft Sentinel and the Microsoft Defender suite to triage incidents, execute containment, and perform AI-assisted analysis. Conducted root cause analysis and supported customers with Microsoft Security Stack configuration and troubleshooting.

Defender For Office Defender For Cloud Apps Incident Response Triage Root Cause Analysis Security Monitoring

SOC Analyst - Shift Lead

Patriot Consulting Technology Group

May 2023 - May 2024 (1 year)

Oversaw weekend SOC operations and incident handling using Microsoft Sentinel and Microsoft 365 Defender, improving response workflows and automation. Designed detection rules, playbooks, and client dashboards while conducting post-incident analysis and third-party security assessments.

Microsoft 365 Defender Incident Response SOC Threat Hunting Dashboards

Senior Cybersecurity Analyst

Cyber Managed Services Inc.

Nov 2021 - May 2024 (2 years 6 months)

Delivered engineering and SOC operations using the Microsoft Azure security stack, creating playbooks and analytical rules to enhance detection and response. Mentored junior analysts, automated processes with Python, and supported clients in a 24x7 SOC environment.

Microsoft Defender azure monitor Python Mentoring Incident Response SOC

Education

Degrees, certifications, and relevant coursework

NED University of Engineering & Technology

Bachelor of Engineering, Computer and Information System Engineering

2016 - 2021

Activities and societies: Final Year Project (09/2020–07/2021): Developed Python-based RESTful APIs for fluid mechanics and astronomical science problems and deployed to the cloud. Course Project (04/2021–07/2021): Implemented a cryptography system using Python.

Bachelor of Engineering in Computer and Information System Engineering from NED University of Engineering & Technology, completed in 2021 with projects focused on RESTful APIs and cryptography.