Sounak Guha

Security Analyst

Tata Consultancy Services

Nov 2024 - Present

Monitored and analyzed security events and alerts using Microsoft Sentinel and Microsoft Defender to identify potential security threats and suspicious activities. Investigated security incidents, performed alert triage, and conducted root cause analysis to support timely incident response and remediation. Developed and optimized Kusto Query Language (KQL) queries for threat hunting, log analysis, and detection of malicious activities across cloud and on-premises environments. Correlated logs from multiple sources, including endpoints, identity services, and network devices, to enhance threat visibility and detection capabilities. Utilized threat intelligence feeds and MITRE ATT&CK framework techniques to identify indicators of compromise (IOCs) and emerging threats. Assisted in vulnerability assessment activities by reviewing security findings, validating risks, and coordinating remediation efforts with relevant teams. Created and maintained incident reports, security dashboards, and operational documentation to support SOC processes and compliance requirements. Collaborated with cross-functional teams to improve security monitoring use cases, incident response procedures, and overall security posture.