Looking for a job

Sandeep Dulam

@sandeepdulam

Message

Cyber Security Analyst at Sun Life Financial who cut SIEM false positives by 25% through detection tuning.

Canada

Message

At Sun Life Financial, I monitor and investigate security alerts in a 24x7 SOC and coordinate declared incidents from identification through closure. I’ve tuned SIEM detections mapped to MITRE ATT&CK, cutting false positives, and automated triage with Python, PowerShell, and SOAR playbooks.

Previously, at Wipro Technologies and Voya Financial, I investigated incidents across endpoint, network, and cloud environments and supported vulnerability remediation and compliance work. Across these roles, I’ve investigated and resolved 500+ security incidents and improved incident response efficiency by 30% through SOC task automation.

Experience

Work history, roles, and key accomplishments

Current

Cybersecurity Analyst

Current

Sun Life Financial

May 2025 - Present (1 year 4 months)

Monitor and triage alerts in IBM QRadar and Microsoft Defender for Endpoint in a 24x7 SOC, coordinate incident response per NIST 800-61, and engineer SIEM rules to reduce false positives. Lead threat hunts, manage vulnerabilities with Tenable Nessus and Qualys, and support SOC 2 and ISO 27001 audits.

Cyber Security Analyst

Wipro Technologies

Feb 2023 - Apr 2025 (2 years 2 months)

Monitored and investigated security incidents for healthcare clients in an MDR model using Splunk SIEM, conducted intrusion analysis and log analysis, and managed incident response. Tuned Splunk correlation rules, supported vulnerability management, and contributed to HIPAA compliance and audit evidence collection.

Splunk SIEM MDR Incident Response Malware Analysis Wireshark Threat Hunting SPL Vulnerability Management HIPAA Log Analysis Windows Event Logs IOCs Threat Intelligence

SOC Analyst

Voya Financial

May 2019 - Jan 2023 (3 years 8 months)

Monitored and analyzed security alerts in Microsoft Sentinel and Splunk within a 24x7x365 SOC, triaged events, and investigated phishing and malware using Microsoft Defender and CrowdStrike Falcon. Supported vulnerability management, monitored authentication events, and automated tasks with PowerShell and Python.