08/30/2026 updated
100 % available
Security Automation Engineer | Microsoft Sentinel | Defender XDR | Go
New Delhi, India
Worldwide
B.Tech in Information TechnologyAbout me
Cybersecurity & DevOps professional specializing in security operations, incident response, Linux, monitoring, automation, and infrastructure security, helping businesses build secure, reliable, and well-monitored systems.
Incident ResponseLog AnalysisBlue Team (Cyber Security)
Security Operations & Detection Engineering
Expertise in incident response, alert triage, threat investigation, threat hunting, log analysis, security monitoring, and detection engineering using Microsoft Sentinel (SIEM/SOAR), Kusto Query Language (KQL), and advanced hunting techniques.
Security Automation & Development
Proficiency in Go, Python, PowerShell, Bash, and SQL for building security automation solutions, playbook development, workflow automation, REST API integrations, and security tooling.
Microsoft Security Ecosystem
Hands-on experience with Microsoft Defender XDR, Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps, Microsoft Intune, Entra ID Protection, and Cross-Platform Device Management.
Platform Engineering & Infrastructure
Knowledge of Docker, Linux (Ubuntu, RHEL), Windows Server, Git, CI/CD pipelines, Grafana, service orchestration, and system design for building and maintaining security-focused infrastructure.
Networking & Security Fundamentals
Understanding of TCP/IP, DNS, DHCP, VPN, IDS/IPS, and OSINT as foundational networking and security concepts applied in security operations and threat analysis.
Incident Response Orchestration
Experience building modular incident response orchestration frameworks such as SentinelMesh, implementing automated triage logic, YAML-defined response workflows, and structured audit trails for distributed environments.
Vulnerability Assessment & Compliance
Participation in vulnerability assessments, remediation recommendations, and compliance visibility initiatives including contributing to improving Microsoft Secure Score.
Web & AI Development
Development of conversational AI assistants using TypeScript, Svelte, JavaScript, CSS, and LLM API integration, including streaming chat interfaces and modular frontend architectures.
Expertise in incident response, alert triage, threat investigation, threat hunting, log analysis, security monitoring, and detection engineering using Microsoft Sentinel (SIEM/SOAR), Kusto Query Language (KQL), and advanced hunting techniques.
Security Automation & Development
Proficiency in Go, Python, PowerShell, Bash, and SQL for building security automation solutions, playbook development, workflow automation, REST API integrations, and security tooling.
Microsoft Security Ecosystem
Hands-on experience with Microsoft Defender XDR, Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps, Microsoft Intune, Entra ID Protection, and Cross-Platform Device Management.
Platform Engineering & Infrastructure
Knowledge of Docker, Linux (Ubuntu, RHEL), Windows Server, Git, CI/CD pipelines, Grafana, service orchestration, and system design for building and maintaining security-focused infrastructure.
Networking & Security Fundamentals
Understanding of TCP/IP, DNS, DHCP, VPN, IDS/IPS, and OSINT as foundational networking and security concepts applied in security operations and threat analysis.
Incident Response Orchestration
Experience building modular incident response orchestration frameworks such as SentinelMesh, implementing automated triage logic, YAML-defined response workflows, and structured audit trails for distributed environments.
Vulnerability Assessment & Compliance
Participation in vulnerability assessments, remediation recommendations, and compliance visibility initiatives including contributing to improving Microsoft Secure Score.
Web & AI Development
Development of conversational AI assistants using TypeScript, Svelte, JavaScript, CSS, and LLM API integration, including streaming chat interfaces and modular frontend architectures.
Experience
Professional experience0 - 5 years
Freelancer since2024
Languages
EnglishFluentHindiNative speaker
Project history
Co-founded an early-stage technology consulting startup providing cybersecurity, cloud infrastructure, web development, and SEO solutions for small businesses. Contributed to defining service offerings, technical strategy, website development, and client-facing solutions. Built and managed the company website, service documentation, and technical proposals. Assisted with client requirements analysis, solution planning, and delivery of web and digital growth solutions. Supported cybersecurity consulting initiatives and security-focused recommendations.
Building a Go-based security operations orchestration platform to simplify deployment, management, and monitoring of security controls. Implemented extension lifecycle orchestration, state management, event logging, and a real-time terminal dashboard using Bubble Tea and SQLite. Designed a modular runtime architecture to support security tooling integrations, automation workflows, and compliance-oriented operational visibility.
Portfolio of technical investigations written from a SOC analyst perspective, available as a pinned project on GitHub.