Open to opportunities

Sanjay Kotabagi

@sanjaykotabagi

Message

SOC Analyst specializing in incident response, cloud security, and threat hunting.

India

Message

What I'm looking for

I am seeking a collaborative SOC role focused on incident response, threat hunting, automation, and cloud security where I can drive detection improvements and operational maturity.

I am a SOC Analyst with 3+ years of hands-on experience providing 24×7 security operations, incident response, and cloud security support for US-based enterprise clients. I have a strong track record in SIEM, XDR/EDR, IAM, DLP, detection engineering, and threat hunting, and I have driven reductions in false positives and improvements in detection accuracy while aligning practices to Big4 security standards.

I have built SOC SOPs and automated workflows, contributed to an in-house AI model for L1/L2 support that reduced alert handling time by 30–40%, and led advanced investigations and threat-hunting activities across cloud and network environments. I seek to apply my expertise in a collaborative SOC environment focused on continuous improvement, automation, and high-quality client service.

Experience

Work history, roles, and key accomplishments

Current

SOC Analyst Associate

Current

PwC

May 2025 - Present (8 months)

Act as primary escalation point for complex SOC alerts, performing advanced triage, threat hunting, and incident response which reduced alert handling time by 30-40% through automation and AI-assisted workflows.

SIEM Threat Hunting Incident Response SOAR Python

SOC Analyst

Deloitte USI

Feb 2023 - Apr 2025 (2 years 2 months)

Provided 24×7 SOC support for US enterprise clients as lead L1 escalation, led phishing and forensic email investigations, and implemented automation to reduce false positives and improve detection accuracy.

Phishing EDR SIEM Okta Azure

Cloud Engineer (L1)

Orbit Technologies

Jun 2022 - Dec 2022 (6 months)

Provisioned and maintained Azure VMs and storage, managed VM scale sets and performance troubleshooting, and supported cloud infrastructure operations and availability monitoring.

Azure VM Management Storage Availability Management