Senthuran Sritharan

I’m a SOC Analyst with 18+ months of hands-on incident triage, endpoint investigation, and containment experience across IBM QRadar, SentinelOne, Azure Sentinel, and Trellix XDR. I analyze activity from logs and endpoints, apply MITRE ATT&CK to scope incidents, and document findings for escalation—working comfortably across Windows, Linux, and cloud environments.

In my current role at ISA Cybersecurity, I investigate 50–120 security events daily, run 40+ SentinelOne endpoint investigations weekly, and isolate compromised endpoints while applying blocklists. I also collaborate with Tier II analysts and incident response teams in a 24/7 SOC rotation to support threat mitigation and continuous improvement, including reducing false positives by 25% through detection tuning. I bring strong hands-on Active Directory and virtualization experience, and I’m actively building credentials in security administration and cybersecurity fundamentals.