May 2025 – Present · 1 yr 1 mo · Noida · Hybrid

• Executed digital forensics and incident response (DFIR) for security incidents, utilizing log analysis and
• metadata extraction to identify root causes and mitigate threats in real-time.
• Orchestrated the end-to-end incident response lifecycleencompassing triage, deep-dive investigation, and remediationutilizing Cyber Kill Chain methodologies to contain daily security threats and maintain high-fdelity documentation for all multi-vector alerts.
• Standardized SOC operations by developing and reviewing comprehensive playbooks for high-priority use cases, improving response consistency and expanding detection coverage across complex hybrid cloud environments.
• Triaged multi-vector security incidents across Cloud, Endpoint, Network, and Data environments, maintaining a 98% SLA (MTTA, MTTR) compliance rate for high-priority alerts within a fast-paced SOC.
• Achieved a consistent 95%+ QA/QC score monthly by ensuring high-fdelity incident documentation and strict adherence to internal security protocols.
• Architected 4 Power Automate workfows for roster management and shift handovers, automating daily BAU tasks and eliminating manual administrative overhead.
• Engineered custom automation pipelines using Claude Code to integrate Jira, Splunk, GCP, and GitHub, reducing the mean-time-to-investigate (MTTI) by 15 minutes per alert.