Sounak Guha

I’m a dedicated Cyber Security Analyst with hands-on experience in security monitoring, incident detection, threat analysis, and response using SIEM and security tools. I focus on investigating security events to help protect enterprise environments, maintain a strong security posture, and support business continuity.

I monitor and analyze security events and alerts using Microsoft Sentinel and Microsoft Defender, then investigate incidents through alert triage and root cause analysis to drive timely response and remediation. I develop and optimize Kusto Query Language (KQL) queries for threat hunting, log analysis, and detection of malicious activity across cloud and on-premises environments. I also correlate logs from endpoints, identity services, and network devices to improve threat visibility and detection.

I leverage threat intelligence feeds and the MITRE ATT&CK framework to identify indicators of compromise (IOCs) and emerging threats. I support vulnerability assessment by reviewing security findings, validating risks, and coordinating remediation efforts. I create and maintain incident reports, security dashboards, and operational documentation to support SOC processes and compliance requirements.

In my project work, I implemented cloud security monitoring and incident response using Microsoft Sentinel by building KQL queries and custom analytics rules and using automated alerting and incident workflows to reduce response time. I also enjoy collaborating cross-functionally to improve security monitoring use cases, incident response procedures, and overall security posture.