At TATA CONSULTANCY SERVICES (TCS), where I support the PwC client, I monitor and investigate security alerts across hybrid endpoints, enterprise servers, and multi-cloud environments. I use Microsoft Sentinel, Microsoft Defender XDR, Splunk ES, and IBM QRadar for SOC operations.
I author KQL queries to analyze endpoint, identity, DNS, firewall, and SaaS telemetry, and investigate phishing and suspicious payloads. I also map adversary activity to MITRE ATT&CK and prepare incident reports and escalation packages for Tier-3 CSIRT teams.
I execute containment actions such as network host isolation and credential revocation, and direct root cause analyses that reduced recurring attack exposures by 30%. I’ve also tuned detection logic to reduce false positives by 10% and perform vulnerability assessments using Qualys VMDR and Tenable.
