Yesireddy Kalyani

Security Analyst

Tech Mahindra Limited

Present - Present

Monitored and managed security incidents on Microsoft Azure Sentinel console, handling day-to-day alerts across multiple client environments globally. Managed high-volume security alerts in a 24×7 SOC using Microsoft Azure Sentinel, ensuring continuous monitoring across multi-tenant environments. Performed advanced threat detection and investigation by correlating logs from endpoints, firewalls, and cloud sources to identify suspicious patterns and potential breaches. Executed incident triage and prioritization based on severity, ensuring rapid response to critical threats and minimizing dwell time. Investigated email-based threats (phishing, spoofing, malicious attachments) using header analysis and threat intelligence tools. Conducted malware analysis and initial containment actions, preventing lateral spread and reducing organizational risk exposure. Led root cause analysis (RCA) for security incidents, identifying attack vectors and recommending long-term remediation strategies. Performed proactive threat hunting using SIEM queries and behavioural analysis techniques to uncover hidden threats not triggered by alerts. Improved detection efficiency by fine-tuning SIEM correlation rules and alert logic, reducing noise and enhancing actionable alerts. Executed vulnerability scanning and risk assessment using Tenable Nessus, ensuring timely remediation and compliance alignment. Monitored and analysed authentication logs and access patterns to detect unauthorized access, brute-force attempts, and account compromise. Managed and tracked security incidents through ServiceNow, ensuring SLA adherence and complete lifecycle documentation. Developed incident response playbooks and automation workflows, improving operational efficiency and standardizing SOC processes. Delivered actionable security insights and reports to stakeholders, highlighting trends, risks, and recommendations to strengthen defence posture.