Venkat Sai

At Infosys, I investigate high-priority endpoint, identity, email, and network security incidents across the Unified SecOps team. I've improved Microsoft Defender incident noise by approximately 30%, reduced false positives by 25%, and increased investigation and response efficiency by approximately 30%.

I use Microsoft Sentinel, Microsoft Defender XDR, KQL, CrowdStrike Falcon, and threat intelligence to investigate phishing, malware, ransomware, suspicious authentication, and identity-based threats. I also conduct proactive threat hunting, develop detection logic, and support Sentinel Playbooks and Azure Logic Apps for alert enrichment and incident notifications.

As a SOC L2 analyst, I'm the primary escalation point for SOC L1 analysts and mentor junior analysts on triage, KQL, investigations, and documentation. I collaborate with infrastructure, identity, endpoint, and application teams to contain incidents and strengthen detection coverage through MITRE ATT&CK mapping.

Before SecOps, I supported Microsoft Entra ID at Infosys, administering identities, groups, enterprise applications, Conditional Access, MFA, PIM, and SSO for 50+ applications. This IAM foundation helps me investigate identity threats and improve access controls that reduce cyber risk.