Santosh Krishnaa R Krishnaa R

Associate Consultant (L2) – Cybersecurity

SISA Infosec Pvt Ltd

Sep 2024 - Present

Monitored, investigated, and responded to real-time security incidents across multiple customer environments in an SLA-driven SOC. Performed threat hunting and security event analysis, identifying sensitive PII/financial data exposure and investigating attacks including LFI, directory traversal, information disclosure, RCE attempts, brute force, and DDoS using SIEM telemetry. Analysed high-volume security alerts, assessed impact, and communicated findings, response actions, and remediation recommendations to customers as a client-facing point of contact. Identified recurring false-positive alerts and supported detection/use-case tuning, improving alert fidelity and reducing unnecessary investigation effort. Identified security monitoring and log-collection gaps, assessed associated risks, and coordinated remediation of missing device/log integrations with customers. Prepared incident reports, threat summaries, and impact assessments; supported PCI DSS and RBI audit evidence requirements and provided customer-specific logs for operational and audit needs. Supported device and log-source governance by reconciling integrated devices against customer inventories, identifying unnecessary integrations, and contributing to the reduction of one customer's integrated devices from approximately 1,000 to 400. Mentored interns and new hires on incident-handling playbooks, alert triage workflows, and MXDR operations.