Durgavasu Pinapatruni

Senior Security Analyst

Deloitte

Apr 2025 - Mar 2026

Working as a Senior Security Analyst in Mintpage, supporting Internal Security and customers for various clients and supporting 24/7 operations in the SOC. Monitoring incidents triggered by SIEM and EDR platforms like Microsoft Sentinel, Splunk, IBM QRadar, CrowdStrike, and Microsoft Defender platforms. Investigated Cloudflare security alerts ingested into Microsoft Sentinel through Log push integration. Analysed alerts generated by Sentinel detection rules, including brute-force attacks, DDoS attacks, and HTTP request flood events, to determine malicious activity, validate true positives, and recommend appropriate mitigation actions. Assigning alerts within the SLA time period and checking the severity of the alerts based on MTTR and MTTD. Prioritizing incidents based on criticality and asset exposure, taking remediation actions with consideration of the impact on the environment and assets. I worked on multiple alerts flagged by SIEM, EDR, or security platforms like Entra ID alerts, network-based alerts, EDR malware alerts, web application alerts, etc. I created use cases in Microsoft Sentinel for various data connector platforms, as well as fine-tuned incidents based on historical analysis. Created automations, playbooks, and workbooks in Sentinel to reduce manual work, for example, isolating hosts based on criticality, impact, and risk. As per the cloud environment, I have experience in AWS and Azure, along with basic knowledge of GCP. I have hands-on experience in AWS, handling CloudTrail alerts, VPC Flow alerts, and Guard Duty alerts. Handling incidents in Security Hub like AWS Macie and other log collection sources based on the SLA. Creating daily, weekly, and monthly reports and presenting monthly PPTs to higher management like VPs, Directors, etc. Having additional security knowledge to handle complex incidents and post-exploitation activities. Investigating incidents by performing RTR in the EDR platform, taking live responses from systems, and conducting investigations to determine what post-exploitation activities took place. Doing static and dynamic analysis of malware files in a sandbox environment and determining whether any data exfiltration took place. Utilizing open-source tools like Virus Total, URL Scan, ANY.RUN, and other tools to identify IOCs and their reputation. Performing threat hunting with the help of open-source platforms like Hacker News, Security Week, SANS, and other platforms. Conducting IOC-based hunting and hypothesis-based hunting to identify false negatives in the environment. Performing vulnerability scans using tools like Nessus, Wiz, and other security tools to identify RCEs, perform risk assignments, classify incidents based on CVSS scores, and take remediation actions with the help of SMEs. Monitored endpoint configurations and patch status using EDR tooling, identifying unpatched or outdated software versions and flagging them for remediation coordination.