Shubhanshu Saini

With a background in SOC operations, I bring a "defender’s mindset" to security engineering. I am proficient in the full incident response lifecycle—from performing L1/L2 analysis and threat triage to developing automated SOAR playbooks that streamline response and reduce alert fatigue. With 7+ years of hands‑on experience supporting over 140 global clients at KPMG, I specialize in Azure Sentinel, RSA NetWitness, and Microsoft Defender. I combine deep technical expertise in detection engineering with strong project management skills to deliver scalable, reliable, and well-documented security solutions.

What I Deliver

• SIEM, SOC & Content Development: End-to-end Azure Sentinel & RSA NetWitness. I build high-fidelity KQL detection, parsers, and SOC L1/L2 operational workflows to reduce false positives.

• SOAR & Automation: Designing automated playbooks to streamline triage, isolate hosts, and accelerate incident response.

• Microsoft 365 Defender Suite: Expert on boarding and tuning for Defender (Endpoint, Identity, Office 365, and Cloud).

• Cloud & Identity Security: Hardening Azure/Entra ID with Conditional Access and Entra ID Protection.

• Security Engineering: Windows/Linux hardening, ASR rules, and large-scale SIEM migrations (e.g., RSA to Sentinel).

• Proven Scale: 7+ years experience; supported 140+ global clients at KPMG.

• Practitioner Perspective: I don't just build tools; I optimize them for SOC Analysts to ensure rapid response.

• Certified in: SC-100 (Cybersecurity Architect) & AZ-500 (Azure Security Engineer).

I bridge the gap between complex engineering and daily SOC operations. Let’s maximize your security ROI.