Smruti Ranjan Dash, CISSP

DevOps Engineer

Canada0 mo experience

AI EnabledAI ML Practitioner

Key Highlights

4+ years in 24x7 Security Operations Center environments.
Expert in incident response and threat hunting using KQL.
Proven ability to reduce MTTD and MTTR.

Stackforce AI infers this person is a Cybersecurity professional with expertise in incident response and security operations.

Contact

Skills

Core Skills

Incident ResponseSiem Monitoring

Other Skills

Threat ModelingThreat AssessmentNessusOpenVASMicrosoft SentinelDefender XDRKQLServiceNowProblem SolvingInformation SecuritySecurity ConsultingSecurity ControlsSecurity Analysis (Securities)Vulnerability AssessmentEndpoint Detection & Response

About

Security Analyst with 4+ years of experience in 24×7 Security Operations Center (SOC) environments within MSSP settings, supporting enterprise clients across hybrid and cloud infrastructures. Experienced in monitoring, investigating, and responding to security incidents using Microsoft Sentinel and Microsoft Defender XDR in enterprise environments. Core competencies include: • SIEM monitoring and log analysis (Microsoft Sentinel) • Extended Detection & Response (MDE / Defender XDR) • Incident response & incident lifecycle management • Threat hunting using KQL • Phishing investigations & email security analysis • Identity & authentication anomaly investigations (Entra ID / Azure AD) • IOC validation & threat intelligence correlation • Endpoint isolation, log analysis & remediation • ServiceNow case management & SLA tracking • Zscaler (Zero trust SASE) deployment and management Strong knowledge of: • MITRE ATT&CK framework • NIST Incident Response lifecycle (SP 800-61 r3) • ISO 27001 • NIST SP 800-207 (Zero trust architectures) • Cloud security (Microsoft Defender for cloud) • Identity protection & Conditional Access • Hybrid Active Directory environments • Security automation & playbook development Proven ability to reduce Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR) while improving detection quality and SOC operational efficiency. 🇨🇦 Open to on-site, hybrid, or remote opportunities anywhere in Canada

Experience

0 mo

Total Experience

Average Tenure

Current Experience

Digital nexus ai

Cybersecurity Intern

Apr 2025 – Sep 2025 · 5 mos · 6215 Lawrence Ave E, Toronto, Ontario, M1C5G4 · Remote

Conducted vulnerability assessments using Nessus and OpenVAS, validated findings, and prioritized remediation efforts based on risk impact.
Performed threat modeling for AI-based wearable device architecture, identifying potential data exposure risks and recommending mitigating security controls.

Threat ModelingThreat Assessment

Hcl technologies

Security Analyst (SOC & Endpoint Security)

Oct 2020 – Jul 2024 · 3 yrs 9 mos · Chennai · Hybrid

Operated in a 24x7 MSSP SOC environment supporting enterprise clients. Leveraged Microsoft Sentinel and Defender XDR to monitor, investigate, and resolve security incidents across endpoints and cloud environments.
Investigated phishing incidents by analyzing SPF/DKIM/DMARC headers, reviewing malicious URLs and attachments, extracting IOCs, and performing containment actions.
Performed log correlation and threat hunting using KQL queries in Microsoft Sentinel. Reduced incident resolution time by improving alert triage efficiency and detection accuracy.
Conducted endpoint isolation and remediation using EDR tools (Defender XDR / Cortex XDR) and managed full incident lifecycle through ServiceNow.
Reviewed and validated IOCs from threat intelligence feeds and contributed to detection rule tuning to reduce false positives.

Microsoft SentinelDefender XDRKQLIncident ResponseServiceNowSIEM Monitoring