At Network Intelligence India Pvt Ltd, I investigated security events across endpoints, identities, email, cloud, and networks, using SIEM and EDR/XDR tools to assess malicious activity and incident scope.
I used SPL and KQL to correlate logs and support threat hunting, and created and tuned detection rules to improve alert quality and reduce false positives. I also mapped attacker behavior to MITRE ATT&CK and recommended detection improvements.
At Skysecure Technologies Private Limited, I monitored alerts with Microsoft Sentinel and Microsoft Defender for Endpoint. I built automated playbooks with Azure Logic Apps and Microsoft Sentinel for enrichment, threat intelligence lookups, blocking malicious IPs, and user or session remediation.
At WF Connect Technologies Pvt Ltd, I monitored security alerts and investigated incidents including phishing, malware, brute-force attempts, and unauthorized access. I documented findings, escalated incidents, and supported continuity through SOC shift handovers.
