Harikrishna Kanuru

Security Analyst with 3+ years of combined experience in network engineering and SOC operations, including hands-on work in real-time SIEM monitoring, alert triage, and incident response across Microsoft security ecosystems (Splunk, IBM QRadar, Cortex XDR, CrowdStrike Falcon, Microsoft Sentinel/Defender). Skilled in KQL for alert validation and threat hunting, MITRE ATT&CK mapping, identity-based threat investigation (MDI), and forensic log analysis.

SOC Analyst - Infosys Ltd - Hyderabad

(2024-05 - 2026-01)

• Triaged 40+ alerts daily in 24x7 SOC using Splunk, QRadar, Sentinel, CrowdStrike; cut false positives 30% via KQL and correlation.
• Contained identity attacks (impossible travel, password spray) within SLA by investigating MDI alerts and driving lockdown with IT.
• Reduced investigation time via forensic analysis of Windows Event Logs and endpoint data.
• Tuned detection by recommending correlation rules based on threat intel and MITRE ATT&CK.
• Achieved 98% SLA managing lifecycle in ServiceNow per SOC SOP.
• Tracked emerging threats via feeds and briefed team on techniques.

SOC Analyst - Natobotics Technologies - Chennai

(2023-08 - 2024-02)

• Detected and escalated confirmed incidents with SLA-compliant closure by monitoring SIEM alerts.
• Reduced misclassification by improving true-positive rate.
• Supported alert tuning by sharing findings for rule optimization.

Office Assistant (Network Engineering duties) - Shriram Chits - Hyderabad

(2022-01 - 2023-02)

• Supported network config, troubleshooting, infra maintenance - foundational experience in TCP/IP, DNS, DHCP, firewalls that carried directly into SOC operations.

B.Tech - EEE - JNTU College of Engineering, Kakinada (2010 - 2014)