Jun 2025 – Jan 2026 · 7 mos · Gurugram · On-site

• Working in the Security Operations Center (SOC) to monitor, analyze, and respond to security alerts across endpoints, identities, and cloud workloads using Cortex XDR, Google Chronicle, and SentinelOne CNAPP.
• Triaged and investigated cloud-based, identity-based, and endpoint-based alerts, reducing mean time to triage (MTTT) by 35%.
• Utilized Cortex XDR for endpoint detection, behavioral analytics, and automated incident response playbooks, improving incident containment time by 30%.
• Utilized SentinelOne CNAPP for cloud posture management, runtime protection, and multi-cloud visibility, contributing to a 40% reduction in high-risk cloud misconfigurations.
• Leveraged Google Chronicle for large-scale log ingestion and correlation, enhancing threat detection accuracy and reducing false positives by 25%.
• Led the Vulnerability Management (VM) Program, conducting scheduled and ad-hoc scans, risk-based prioritization, and coordinating remediation with IT and engineering teams, resulting in a 45% reduction in critical and high vulnerabilities.
• Performed Application Security Testing across web applications and APIs, identifying vulnerabilities such as price tampering, RCE-to-shell scenarios, and business logic flaws using Kali Linux and Burp Suite.
• Participated in threat hunting exercises to proactively identify IOCs and anomalous behavior.
• Designed and developed a CISO Metrics and Security Visibility Tool providing executive-level dashboards improving security reporting visibility by 50%.