Amal Krishna A

Security professional with 2 years of Incident Response managing L2/L3 operations, including alert triage, incident investigation, and response coordination to ensure effective containment and remediation. Improved security operations efficiency by reducing Mean Time to Detect (MTTD) by approximately 30% and Mean Time to Respond (MTTR) by nearly 25% through optimized alert correlation, enhanced KQL-based detection rules, and proactive threat hunting in Microsoft Sentinel. Hands-on expertise in phishing investigations, BEC analysis, malicious URL and attachment analysis, and log correlation across email,endpoint,and network environments to detect encrypted file activity, abnormal authentications,privilege escalation, brute-force attempts, and data exfiltration.

Leveraged threat intelligence, MITRE ATT&CK mapping, and OSINT techniques to strengthen detection coverage while reducing false positive rates by around 20%. Conducted dark web monitoring to identify exposed credentials and data.

Experienced cybersecurity professional with 2 years of hands-on Incident Response across L2/L3 operations, specializing in alert triage, incident investigation, and coordinated response to ensure timely containment and remediation. Proven track record of improving SOC efficiency by reducing Mean Time to Detect (MTTD) by ~30% and Mean Time to Respond (MTTR) by ~25% through optimized alert correlation, advanced KQL-based detection engineering, and proactive threat hunting within Microsoft Sentinel.

Demonstrated expertise in phishing investigations, BEC analysis, and malicious URL/attachment analysis, along with deep log correlation across email, endpoint, and network environments to identify threats such as encrypted file activity, abnormal authentications, privilege escalation, brute-force attempts, and data exfiltration. Skilled in leveraging threat intelligence, MITRE ATT&CK mapping, and OSINT techniques to enhance detection coverage while reducing false positives by approximately 20%. Additionally experienced in dark web monitoring to detect exposed credentials and sensitive data leaks.