May 2025 – Jan 2026 · 8 mos · Pune, Maharashtra, India · On-site

• Worked as an Information Security Analyst L2 specializing in SOC operations, threat detection, and incident response across global environments.
• Acted as a Detection Engineer by creating and deploying 100+ custom alert rules and fine-tuning analytics in Microsoft Sentinel and Splunk.
• Handled escalation cases from L1 SOC analysts, performing rapid triage, investigation, and response using SIEM and security tools.
• Led incident investigations across Microsoft Sentinel and M365 Defender, conducting root-cause analysis for high-severity incidents.
• Investigated phishing, malware, and account compromise incidents, ensuring timely containment and remediation.
• Conducted proactive threat hunting and vulnerability assessments aligned with MITRE ATT&CK and Cyber Kill Chain frameworks.
• Created monthly Cyber Threat Intelligence (CTI) reports, leveraged threat intelligence platforms, and enriched detections using automation.
• Built automated playbooks to enhance SOC efficiency.

Jan 2024 – May 2025 · 1 yr 4 mos

• Promoted to Senior Analyst in January 2024.
• Provided 24x7 support for four clients concurrently, maintaining Cloud Native and Network Security.
• Monitored security alerts and network traffic for potential threats or breaches; prioritized and remediated identified vulnerabilities to minimize risk and strategically managed SOC escalations.
• Experienced with ServiceNow Incident Management and other Azure services.
• Handled incidents including IOC, deployment issues, malware, phishing, publicly exposed data, threat hunting, and Azure cloud cases; conducted incident audits, fine-tuned alerts, and maintained comprehensive security incident documentation and reporting.
• Managed response, triage, and escalation of cybersecurity incidents related to user access, security breaches, and user privacy; created documentation to prevent recurrence.
• Conducted security audits on IT infrastructure and policies, including firewalls, access management, user authentication, and risk mitigation.

Sep 2022 – Jan 2024 · 1 yr 4 mos

• Worked with Microsoft Sentinel, M365 Defender, Azure Active Directory, phishing-reported emails, ServiceNow tasks, SOP creation, malware analysis, and incident audits.
• Followed ITIL-aligned Incident Management processes and created SOPs and weekly reports for documentation and client communications.
• Tracked and maintained incident handling playbooks, automation rules, and SIEM analytical rules in line with defined processes.
• Released vulnerability advisories to CSFC stakeholders, clients, and management to support timely patch implementation and risk mitigation.
• Performed root-cause analysis and post-incident reviews to identify gaps, enhance detection logic, and strengthen SOC processes and response maturity.

Jan 2022 – Jun 2022 · 5 mos · Delhi, India · On-site

Jul 2021 – Aug 2021 · 1 mo · India

Jun 2021 – Aug 2021 · 2 mos

May 2021 – Jun 2021 · 1 mo