SNEHA SATHYAN

I’m a SOC Analyst L1 with 8+ months of hands-on experience in 24×7 Security Operations Center environments, where I monitor, triage, and investigate security events end-to-end. My day-to-day work centers on Microsoft Sentinel, Microsoft Defender XDR, and Microsoft Purview DLP, with a strong focus on turning alerts into confirmed incidents through disciplined validation.

I specialize in SIEM monitoring, alert triage, incident investigation, log correlation, and root cause analysis, documenting findings and coordinating security escalation workflows. I use MITRE ATT&CK for threat classification and IOC analysis to support faster, more accurate security decisions, while applying Microsoft Sentinel SOAR automation to streamline investigation workflows.

I also bring compliance-minded security operations experience, investigating Microsoft Purview DLP incidents across Exchange Online, SharePoint Online, OneDrive, and Microsoft Teams. I’ve worked to reduce false positives by systematically correlating signals across Microsoft Defender XDR, Microsoft Purview, and Microsoft 365 using Kusto Query Language (KQL), and I’m motivated to keep improving detection quality, investigation accuracy, and response consistency in a 24/7 SOC.