Sourabh Sharma

At SafeAeon Inc, I monitor and investigate security incidents for MNC clients across Australia, the US, and the UK in a 24/7 SOC environment.

I handle high-severity accounts independently, containing threats such as DDoS attacks, endpoint compromises, suspicious firewall traffic, phishing attempts, BEC attacks, and malicious email campaigns. I use SentinelOne, CrowdStrike, Deep Instinct, Cylance, Morphisec, Microsoft Defender, TrendMicro, Avanan, and Mimecast to investigate and respond.

I write KQL queries in Microsoft Sentinel for threat hunting and custom detection rules, while tuning noisy detections to improve alert quality. I also manage incident workflows through Jira and Autotask, communicate with clients across time zones, and work to SLA targets.

I've supported junior analysts through SOC tools, workflows, and escalation procedures, and bring practical experience in SIEM, EDR, incident reporting, IOC mapping, and security frameworks including MITRE ATT&CK and the Cyber Kill Chain.