Security Analyst
📍 Chicago, IL, USA
Security analyst with 4+ years of hands-on SOC experience detecting, investigating, and neutralizing threats across enterprise and cloud environments. Skilled in the full incident response lifecycle using SIEM platforms (Splunk, Microsoft Sentinel, QRadar), EDR/XDR tools (CrowdStrike Falcon, Defender XDR), and SOAR automation that reduced MTTR by 50%. Experienced in threat hunting, vulnerability management, and cloud security (AWS, Azure, GCP).
CrowdStrike
Oct 2024 — Present
Triaged and investigated P0/P1 security incidents in a 24/7 SOC environment, analyzing 400+ alerts/month using Splunk and CrowdStrike Falcon. Automated SOC tasks in Cortex XSOAR using Python/PowerShell/Bash, reducing MTTR by ~50%. Performed endpoint investigations in Falcon and Defender XDR. Conducted threat hunting across IAM, SSO, and EDR telemetry. Developed and tuned 30+ custom SIEM correlation rules mapped to MITRE ATT&CK. Performed digital forensics, vulnerability management, and multi-cloud hardening (AWS, Azure, GCP). Supported FedRAMP, PCI DSS, HIPAA, and GDPR compliance assessments.
HCLTech
Jun 2020 — Jul 2023
Operated in a 24/7 Global SOC monitoring SIEM dashboards and analyzing alerts from endpoint, firewall, and email platforms. Investigated suspicious activities using SentinelOne EDR. Administered firewall policies across Palo Alto, Fortinet, and Cisco ASA (500+ configuration changes, 30% reduction in misconfigurations). Applied Zero Trust principles reducing unauthorized access by 40%. Conducted Active Directory and Azure AD audits. Administered Proofpoint Email Security reducing inbound phishing by 35% across 10,000+ mailboxes. Performed vulnerability assessments remediating 200+ high-risk CVEs. Supported PCI DSS, HIPAA, and GDPR compliance readiness.
MSc · Cybersecurity
2023 – 2025
BSc · Electronics and Communication Engineering
2017 – 2021