varaprasad padamata

I’m a Cyber Security SOC Analyst with 4 years of experience in a Security Operations Center (SOC) environment at Quest Global, focused on SIEM monitoring, alert analysis, and incident response. I strengthen enterprise security posture through proactive monitoring, threat detection, detection engineering, and continuous improvement.

I regularly investigate phishing, malware, and authentication-based attacks using Microsoft Sentinel and the Microsoft Defender suite—covering Microsoft Defender XDR/EDR, Defender for Endpoint, Defender for Office 365, Defender for Cloud, and Entra ID (Azure AD). I validate threats such as impossible travel, password spray, brute force, and MFA fatigue by reviewing suspicious sign-ins and conditional access logs, then drive mitigation with clear incident lifecycle management from triage to closure.

I also monitor logs from firewalls, proxy servers, antivirus, IPS/IDS, load balancers, and system applications, and I assess DDoS alerts in coordination with the network team. After incidents, I perform Root Cause Analysis (RCA), apply MITRE ATT&CK-informed context and DFIR fundamentals, and recommend preventive actions—including verification-based whitelisting of safe URLs/domains at EDR and firewall levels—so cases are closed within defined SLAs.