Headline

SOC Analyst | Cybersecurity | Microsoft Defender XDR • Proofpoint • Entra ID | Threat Detection & IR | CompTIA Security+ | Microsoft & Google Security Certified | Cloud | MITRE ATT&CK | 24x7 SOC

About

50–70 high-priority incidents. 30+ phishing campaigns a week. One analyst holding the line — with zero SLA misses. I'm a SOC Analyst at Kyndryl with 3 years securing enterprise environments across endpoint, identity, email, and cloud in a 24x7 SOC. My core stack: Microsoft Defender XDR, Proofpoint, Entra ID, and Microsoft Sentinel — used daily to detect, triage, and contain threats before they escalate. What I bring: ▸ Cross-domain incident triage mapped to MITRE ATT&CK TTPs ▸ Phishing & BEC detection via Proofpoint + MDO Explorer (20% false positive reduction, campaign containment) ▸ IOC enrichment, threat hunting & root cause analysis ▸ Full incident lifecycle management: ServiceNow, JIRA, PIRs ▸ 100% SLA compliance across complex P1/P2 escalations ▸ Detection rule tuning: reduced false positives by 10% through advanced correlation Tools: Microsoft Defender XDR · Sentinel · Proofpoint · Entra ID · KQL · SIEM · SOAR · ServiceNow Certifications: CompTIA Security+ · Microsoft SC-200 · Google Security Ops Engineer · Google ACE · AWS Cloud Practitioner · Azure AZ-900 Open to Senior SOC Analyst (L2), Threat Detection Engineer, or Detection & Response roles. 📩 intihemanth01@gmail.com

Location

Greater Bengaluru Area

Work experience

SOC Analyst at Kyndryl India, Sep 2023 - Present · 2 yrs 10 mos, Bengaluru, Perform deep-dive analysis on 50–70 high-priority security incidents per week, ensuring 100% SLA compliance for complex escalations. Leverage Microsoft Defender for XDR to perform cross-domain incident triage and automated response actions, correlating telemetry across endpoints, identities, and cloud apps to accelerate containment. Investigated phishing and email-based attacks using Proofpoint and Microsoft Defender for Office 365 (MDO) Explorer, reducing false positives by 20% and improving detection accuracy. Reduced false positives by 15% through advanced correlation rules and event correlation across disparate data sources. Manage the full incident lifecycle within ServiceNow and JIRA, from initial detection to post-incident review. Authored comprehensive incident reports and post-incident reviews (PIRs) to facilitate knowledge sharing, compliance audits, and process optimization.

Internship Trainee at TECHNICAL HUB, Dec 2022 - Apr 2023 · 5 mos, Kakinada, Andhra Pradesh, India, Gained hands-on experience in core DevOps concepts, including AWS, Git/GitHub, Jenkins, and Azure. Developed a strong understanding of AWS and Azure cloud services, such as EC2, S3, load balancing, VPN, and subnets. Effectively mentored and managed a team of approximately 100 students, enhancing communication and leadership skills.

Education

Bachelor of Technology - BTech, Electrical, Electronics and Communications Engineering, Aditya Educational Institutions

Bachelor of Technology, Electrical, Electronics and Communications Engineering, Aditya University