Open to opportunities

Sri Shailesh Mukesh User

@srishaileshmukeshuse

Message

I investigate enterprise security incidents across SIEM, EDR, cloud, email, and network security platforms.

India

Message

What I'm looking for

I'm looking for security operations, incident response, threat hunting, detection engineering, or SOC automation work where I can investigate complex threats and improve detection workflows.

I'm currently investigating security incidents at Bahwan Cybertek through Cortex XSOAR, Microsoft Defender, CrowdStrike Falcon, Splunk, and ServiceNow. I correlate endpoint, email, cloud, firewall, VPN, AWS, and IDS telemetry to validate alerts, determine severity, and support containment and remediation.

Previously at Tata Consultancy Services, I monitored and triaged alerts in a 24×7 enterprise SOC using Microsoft Sentinel, Splunk, and ELK. I investigated phishing, malware, authentication anomalies, endpoint activity, and web attacks, while optimizing KQL detections for suspicious PowerShell, brute-force, phishing, and anomalous authentication activity.

I've also built a VMware-based SOC detection and threat-hunting lab and an AI-assisted SOC automation platform that enriches IOCs and summarizes incidents using Microsoft Sentinel, VirusTotal, Slack, Jira, Python MCP, and an LLM.

Experience

Work history, roles, and key accomplishments

Current

SOC Analyst

Current

Bahwan Cybertek Pvt Ltd

Jun 2026 - Present (2 months)

Monitored and investigated security incidents using Cortex XSOAR, handling alerts from Microsoft Defender and CrowdStrike Falcon. Performed alert triage, incident validation, and root cause analysis, correlating endpoint, email, and cloud telemetry.

XSOAR Microsoft Defender For Endpoint Microsoft Defender Splunk Palo Alto Firewalls AWS ServiceNow Incident Response