At Tata Consultancy Services, I monitored security events in a 24×7 SOC using Microsoft Sentinel, Splunk Enterprise Security, and IBM QRadar. I investigated more than 100 alerts weekly, including phishing, malware, brute-force attacks, and account compromise.
I developed and optimized KQL queries for threat hunting, log analysis, and incident investigation. By tuning correlation rules and improving detection logic, I reduced SIEM false positives.
I also investigated endpoint and email security incidents using Microsoft Defender for Endpoint, CrowdStrike Falcon, Proofpoint, and Mimecast. I applied the MITRE ATT&CK Framework and Cyber Kill Chain during investigations and managed incidents in ServiceNow.

