Open to opportunities

suresh A

@suresha

Message

Cybersecurity professional specializing in incident response, SIEM, and threat hunting.

India

Message

What I'm looking for

I seek a hands-on security role focused on incident response, SIEM tuning, threat hunting, and collaboration with red/purple teams to improve defenses and grow into technical leadership.

I am a cybersecurity practitioner with over six years' experience in SIEM management, incident response, SOC operations, and threat hunting across cloud, network, and endpoint environments. I have led proactive threat-hunting, fine-tuned SIEM detections to reduce false positives, and supported red and purple team exercises to strengthen organizational security posture.

I have hands-on experience with IBM QRadar, Splunk, Azure Sentinel, CrowdStrike, Microsoft Defender, Proofpoint, Palo Alto, Qualys, and a range of malware analysis tools, and I actively collaborate with cross-functional teams to drive incident resolution, process improvements, and knowledge transfer.

Experience

Work history, roles, and key accomplishments

Current

L3 Incident Responder

Current

Happiest Minds Technologies

Sep 2024 - Present (1 year)

Investigate advanced security incidents across firewalls, EDR/XDR, email gateways and cloud platforms; fine-tune SIEM detections and lead proactive threat hunting using MITRE ATT&CK to reduce false positives and accelerate containment.

Cortex XDR Microsoft Defender ProofPoint Azure Sentinel Threat Hunting Incident Response SIEM Tuning

SOC Analyst (L2)

SA Tech Software India Pvt Ltd

Feb 2022 - Dec 2023 (1 year 10 months)

Delivered L2 incident response for EDR, SIEM, and firewall alerts; investigated and contained phishing, malware and network anomalies, implemented process improvements and trained new team members.

EDR SIEM Firewalls Phishing Malware Analysis ServiceNow Mentoring

Information Security Analyst

Boven Technologies Pvt Ltd

Sep 2018 - Jan 2022 (3 years 4 months)

Performed initial triage and analysis of IBM QRadar offenses, monitored real-time security events, escalated incidents to L2 and collaborated with Threat Intelligence to produce security reports and trend analysis.

QRadar ServiceNow Threat Intelligence Triage Vulnerability Management