Cybersecurity Engineer & SOC Analyst
Nov 2024 — PresentAmazure Technology Pvt Ltd
- Triage and investigate a high-volume alert queue across endpoint and SIEM platforms in a 24x7 MSSP-style multi-customer environment, escalating confirmed incidents and reducing false-positive volume through refined Falcon detection policies.
- Design and deploy Falcon Fusion SOAR playbooks automating alert triage, device isolation and analyst notification, directly lowering MTTR and analyst workload.
- Administer and fine-tune CrowdStrike Falcon across an enterprise endpoint fleet, including agent installation, configuration and troubleshooting.
- Maintain a GitHub repository of version-controlled SIEM detection rules enforced across multiple client environments.
- Design and implement identity-based conditional access policies across customer environments.
- Evaluate and onboard new security products, including WatchGuard and Kitecyber, into SOC monitoring and response workflows.
- Author recurring incident and risk reports translating technical findings into remediation recommendations.
- Correlate threat intelligence and IOCs against MITRE ATT&CK techniques to strengthen endpoint and cloud detection coverage.
- Execute recurring security audits and document incident timelines and root-cause findings for compliance and lessons-learned review.