Looking for a job

Shahid Syed

@shahidsyed

Message

I investigate threats, hunt attacker behavior, and strengthen detection across SIEM and endpoint platforms.

India

Message

What I'm looking for

I'm looking to continue contributing in cyber threat intelligence and SOC work, with opportunities to investigate threats, hunt attacker behavior, develop KQL-based detections, and strengthen incident response.

I'm currently working in Cyber Threat Intelligence and SOC at Capita, investigating IOCs, malware, attacker TTPs, ransomware campaigns, and exploited vulnerabilities. I turn intelligence findings into actionable detection, hunting, and investigation opportunities using Microsoft Sentinel and Microsoft Defender.

At CDW, I investigated incidents across endpoint, identity, and cloud environments, tuned Sentinel analytics to reduce false positives, and built KQL queries for threat detection. I also delivered incident reports, SOC metrics, and executive summaries while supporting vulnerability validation through Qualys.

Across Cyient, Vivriti Capital, and Addicor Technologies, I've handled alert triage, phishing and malware investigations, endpoint investigations, log monitoring, and incident escalation. My work has included Microsoft Sentinel, Google Chronicle, QRadar, SentinelOne, Cortex XDR, Proofpoint, and firewall telemetry.

I bring 7+ years in security operations, combining incident response, threat hunting, IOC enrichment, MITRE ATT&CK mapping, and detection engineering. I use KQL, SPL, Python, PowerShell, and Bash to investigate threats and improve security visibility.

Experience

Work history, roles, and key accomplishments

Current

SOC Analyst / Cyber Threat Intelligence (TI) Analyst

Current

Capita Pvt Ltd

May 2026 - Present (4 months)

Monitor and analyze threat intelligence from external sources, security blogs, DFIR reports, and vulnerability intelligence feeds. Investigate IOCs, threat actors, TTPs, and malware activity to identify potential security threats.

Threat Intelligence IOC Analysis KQL Microsoft Sentinel Microsoft Defender OTX CISA KEV MITRE ATT&CK Virus Total DFIR Cyberint Shodan FOFA

Sr. SOC Analyst

CDW

Aug 2025 - May 2026 (9 months)

Investigated and responded to security incidents across endpoint, identity, and cloud environments. Performed proactive threat hunting using custom KQL queries and tuned Microsoft Sentinel analytics rules.

Incident Response Threat Hunting KQL Microsoft Sentinel Microsoft Defender For Endpoint Microsoft Defender for Cloud Qualys ServiceNow SOC Reporting

Cyber Security Analyst

Cyient - Payroll: Tanama Software

Jan 2025 - Jul 2025 (6 months)

Triaged and investigated security alerts using Microsoft Sentinel and Google Chronicle. Automated phishing and malware response workflows using Microsoft Sentinel Playbooks.

Microsoft Sentinel Google Chronicle KQL Microsoft Defender For Endpoint MITRE ATT&CK ProofPoint Incident Response Playbooks

SOC Analyst

Vivriti Capital

Dec 2024 - Jan 2025 (1 month)

Investigated security alerts and suspicious activities across enterprise environments. Assisted in integrating log sources and supported endpoint and cloud security investigations.

Microsoft Defender For Endpoint Microsoft Defender for Cloud Qualys Security Monitoring incident investigation

SOC Analyst (L1 & L2)

Addicor Technologies

Aug 2022 - Jul 2024 (1 year 11 months)

Monitored and investigated security events using SIEM and endpoint security platforms. Investigated SentinelOne endpoint alerts and reviewed Palo Alto firewall logs for abnormal traffic.

SIEM SentinelOne Palo Alto incident investigation Jira SOC Reporting

SOC Analyst (L1)

Addicor Technologies

Aug 2020 - Jul 2022 (1 year 11 months)

Triaged real-time security alerts in IBM QRadar and investigated malware and shell-based attacks using Cortex XDR. Analyzed Proofpoint email security reports to identify phishing.

IBM QRadar Cortex XDR ProofPoint ServiceNow Incident Triage Email Phishing Investigation

Junior SOC Analyst

Addicor Technologies

Aug 2019 - Jul 2020 (11 months)

Triaged firewall security alerts using Fortinet and investigated endpoint security alerts using McAfee. Conducted vulnerability scans using Greenbone and reviewed Linux security logs.

Fortinet McAfee Greenbone Linux Security Vulnerability Scanning SOC Monitoring