jeevan reddy

Cybersecurity Analyst (SOC)

AMD

Feb 2022 - Present

Monitor and investigate security events across firewalls, endpoints, Active Directory, servers, applications, and AWS/Azure cloud environments using Splunk, Microsoft Sentinel, and IBM QRadar — supporting a 24x7 SOC for 5,000+ users. Triage and investigate phishing, ransomware, malware, credential-based attacks, and anomalous logins using CrowdStrike Falcon, Microsoft Defender XDR, SentinelOne, and Bitdefender. Built and tuned 25+ SIEM correlation rules, SPL searches, dashboards, and SOAR playbooks aligned to MITRE ATT&CK, reducing false positives and automating triage/ticketing for low-severity alerts. Run vulnerability assessments in Qualys and Tenable, prioritize findings by CVSS, validate remediation, and track closure against SLA; perform control validation ahead of infrastructure changes. Prepare audit evidence and security documentation supporting NIST CSF and ISO 27001 reviews; assist directly with internal and external audits. Lead proactive threat hunts using MITRE ATT&CK, IOC enrichment, and STIX/TAXII/OSINT; monitor AWS CloudTrail, GuardDuty, and IAM for policy violations across hybrid cloud. Partner with infrastructure, cloud, network, and application teams on remediation plans; author incident reports, root-cause analyses, and SOC performance metrics for leadership.