Shreyas SP

At Capgemini, I monitor and respond to security alerts across SOC, MSSP, and directly monitored systems, performing Tier 1 and Tier 2 triage and escalating significant incidents to Security Engineering.

I investigate incidents using logs from firewalls, IDS/IPS, databases, web servers, network devices, authentication systems, endpoints, email gateways, and cloud-hosted devices. I work with Splunk, Microsoft Sentinel, CrowdStrike, Cortex XDR, Symantec DLP, Microsoft Defender, and vulnerability-management tools to identify threats, eliminate false positives, and improve detection coverage.

I design and tune SIEM rules, develop incident-response playbooks, support threat hunting, curate threat intelligence, and apply the MITRE ATT&CK framework to incident detection and response.

I also build dashboards, reports, and KPIs to measure security hygiene, monitoring health, alerting effectiveness, and security program trends across IaaS and critical SaaS environments.