Bangalore, Karnataka, India
Summary
Led 24/7 security operations and incident response for a key client, ensuring robust threat detection, analysis, and containment across hybrid environments.
Highlights
Investigated over 100 security incidents monthly (malware, phishing, brute-force, insider threats) with 100% SLA compliance, ensuring rapid containment and reducing mean time to resolution by 35%.
Automated phishing triage using Sentinel and Defender, blocking 100+ malicious URLs and 80+ phishing campaigns, which reduced user click rate by 40% and overall user impact by 50%.
Engineered and mapped 30+ detection rules to MITRE ATT&CK and Cyber Kill Chain, boosting threat coverage by 20% and improving detection accuracy while cutting false positives by 30%.
Performed endpoint forensics and isolated infected systems via Defender Live Response, decreasing attacker dwell time by 30% and preventing lateral movement across the network.
Trained and mentored junior SOC analysts on Sentinel dashboards, triage workflows, and phishing investigation SOPs, reducing onboarding time by 50% and improving shift handover efficiency.