Open to opportunities

Sarita Jena

@saritajena

Message

I build threat detections and automate SOC response across Microsoft Sentinel and IBM QRadar.

India

Message

What I'm looking for

I'm looking to build and improve detection engineering, threat hunting, and SIEM automation capabilities, reducing false positives and response effort while supporting strong incident response and compliance outcomes.

I've built and fine-tuned detection use cases at Armor Defense, reducing investigation time by 25% through NIST-aligned playbooks, runbooks, and SOPs. I lead threat hunting for escalated L2/L3 incidents, map attacker TTPs to MITRE ATT&CK, and translate findings on APTs and zero-day exploits into new detection rules.

Previously at Unisys Technology Solutions, I developed 20+ SIEM use cases and custom KQL/AQL detection logic across Microsoft Sentinel, using CrowdStrike Falcon and Carbon Black intelligence to investigate lateral movement, data exfiltration, phishing, BEC, and malware campaigns.

At Accenture Solutions, I designed, deployed, and migrated Microsoft Sentinel SOC infrastructure for a major telecom client. I authored 50+ detection rules and hunting queries, reduced false positives by 30%, and automated IOC enrichment and blocking with Azure Logic Apps and SOAR playbooks.

Experience

Work history, roles, and key accomplishments

Current

Security Analyst II (Senior SOC Lead / Threat Hunter)

Current

Armor Defense

Aug 2023 - Present (3 years 1 month)

Built and fine-tuned detection use cases to reduce MTTD, mapping attacker TTPs to MITRE ATT&CK during deep-dive investigations. Authored incident response playbooks, runbooks, and SOPs aligned with NIST, reducing investigation time by 25%.

Detection Engineering Threat Hunting Incident Response SOAR Azure Logic Apps NIST Playbook Development SOC Operations