Monisha Suresh

Cyber Security Analyst with 5+ years of experience in SOC operations, threat detection, and incident response within enterprise environments. Skilled in various SIEM platforms with experience in threat hunting, log analysis, and intrusion detection. Focused on improving detection capabilities, reducing incident response time, and strengthening overall security posture.

Cyber Security Analyst L2 - Availity - India

(2024-04 - 2026-01)

• Monitored and triaged security events from firewalls, IDS/IPS, and EDR platforms using SIEM tools (IBM QRadar, Splunk), improving alert fidelity and reducing false positives by 20%.
• Investigated and responded to security incidents in a HIPAA-compliant environment, ensuring 100% protection of PHI and adherence to regulatory requirements.
• Performed threat hunting and behavioural analysis to detect advanced threats and enhance overall security posture.
• Collaborated with cross-functional teams to support incident response and remediation within SLAs.
• Developed SIEM use cases and dashboards improving threat visibility and detection efficiency.

Threat Hunter L2 - Atos - India

(2023-01 - 2024-04)

• Conducted advanced threat hunting across enterprise environments using AI-driven MDR platform (Alsaac) to identify zero-day threats, anomalous behaviour, and stealth attack techniques.
• Developed and optimized 30+ custom detection rules and correlation logic, improving anomaly and threat detection accuracy by 25%.
• Delivered client-facing security briefings presenting incident findings, mitigation strategies, and recommended security improvements.
• Produced threat intelligence reports, attack analysis documentation, and detection recommendations to improve security monitoring and response processes.
• Investigated Indicators of Compromise (IOCs) from multiple threat intelligence sources to validate threats and support timely incident response.

Security Analyst L1 - Atos - India

(2020-10 - 2023-01)

• Monitored network traffic and system logs 24/7 using SIEM tools (IBM QRadar, ArcSight), detecting and mitigating over 95% of security incidents before escalation, reducing risk exposure.
• Investigated and triaged security alerts to identify true positives, producing detailed incident analysis reports that improved client understanding and incident response efficiency by 30%.
• Maintained strict SLA compliance by prioritizing and resolving incidents based on severity, achieving ~100% SLA adherence across all high- and medium-priority tickets.
• Developed and updated Standard Operating Procedures (SOPs) and incident response playbooks, resulting in 20% faster incident resolution times and improved team consistency.
• Fine-tuned SIEM detection rules, reducing false positive alerts by over 40%, enhancing alert accuracy and operational efficiency.
• Generated daily, weekly, and monthly security reports using data from multiple log sources (Active Directory, Linux systems, firewall, and proxy logs), delivering actionable insights that improved threat detection and monitoring efficiency by 15%

Bachelor of Engineering - Engineering - U.B.D.T. College of Engineering, VTU