Open to opportunities

Santosh Kumar

@santoshkumar18

Message

I build threat detections and automate incident response across cloud, endpoint, and network environments.

India

Message

What I'm looking for

I'm looking to continue building threat detection, incident response, SIEM/EDR operations, and security automation across cloud, endpoint, and network environments while strengthening organizational security posture.

At Liminal Custody, I monitor Datadog SIEM alerts across cloud, endpoint, and network environments, investigate threats with CrowdStrike EDR, and drive incidents from detection through containment and remediation.

I've created and tuned custom Datadog detection rules, reduced alert noise through refined logic and thresholds, and built SOC dashboards that improve visibility and investigation speed. I also implement SOAR workflows to automate repetitive SOC processes and accelerate response activities.

Previously at Microland, I used IBM QRadar to triage alerts, investigate malware and network activity, correlate logs, and coordinate remediation with IT teams. My work includes root-cause analysis, preventive controls, incident documentation, and support for endpoint, network, and cloud security operations.

I bring structured investigation, escalation, reporting, and communication skills developed across security and high-volume operations roles.

Experience

Work history, roles, and key accomplishments

Current

Senior SOC Engineer

Current

Liminal Custody

Jun 2024 - Present (2 years 2 months)

Monitor and analyze security alerts in Datadog SIEM, perform end-to-end alert triage, threat investigation, and incident response. Created and maintained custom detection rules, reduced false positives, implemented SOAR workflows, and built SOC dashboards.