Manish Talla

Cybersecurity professional with 5+ years of hands-on experience in Security Operations, Incident Response, Threat Detection, and SIEM engineering across enterprise environments. Strong expertise in Microsoft Sentinel, including KQL-based threat hunting, analytics rule development, detection tuning, and SOAR automation using Logic Apps. Experienced in managing the complete incident response lifecycle, from alert triage and investigation through containment, eradication, recovery, and post-incident analysis across on-premises, Azure, and AWS environments.

Proven ability to develop MITRE ATT&CK-aligned detection use cases, reduce false positives and alert fatigue, and improve incident response efficiency through automation. Hands-on experience investigating phishing, malware, ransomware, credential compromise, suspicious PowerShell activity, and Living-off-the-Land (LotL) techniques. Holds CEH, CompTIA Security+, and ISO/IEC 27001:2022 Lead Implementer certifications, with a strong focus on continuously improving security monitoring, detection coverage, and operational resilience.

Cyber Security Analyst - Informatica

(2026-01)

• Investigate and validate L2 security incidents escalated by L1 analysts using SIEM, EDR/XDR, firewall, email, and identity logs.
• Perform deep-dive analysis of phishing, malware, suspicious logins, endpoint threats, DDoS activity, and compromised accounts.
• Execute containment and remediation actions such as endpoint isolation, account disabling, session/token revocation, IOC blocking, and password resets.
• Perform IOC enrichment and threat intelligence analysis using IP, domain, URL, and file-hash reputation to determine incident severity and impact.
• Escalate critical incidents to L3/Incident Response teams with complete investigation findings, evidence, timeline, actions taken, and recommended next steps.

Security Analyst - Wipro Limited

(2024-04 - 2025-12)

• Monitored and investigated security events — firewalls, endpoints, servers, applications — across a 24×7 SOC serving 5,000+ users, using Microsoft Sentinel as the primary SIEM with Splunk for cross-platform correlation.
• Engineered 10+ KQL-based Sentinel analytics rules mapped to MITRE ATT&CK TTPs, detecting brute force, credential stuffing, login anomalies, and malware with measurable improvement in detection fidelity.
• Developed automated Logic Apps/playbooks and Splunk SOAR runbooks, reducing manual triage effort by ~20% and accelerating L1→L2 escalation response.
• Integrated Tenable/Qualys VAPT findings into Sentinel incident workflows; tracked and closed 100% of critical/high-severity vulnerabilities within defined SLA windows.
• Enforced Zero Trust access controls and DLP policies across 100+ secured systems; enabled continuous compliance visibility through Sentinel workbooks and automated reporting.

SOC Analyst - Divis Labs

(2022-10 - 2024-03)

• Investigated APT campaigns — ransomware, Emotet, and PowerShell-based LotL attacks — using Microsoft Sentinel, Splunk, SentinelOne, and MS Defender; produced DFIR reports and lessons-learned documentation to refine detection playbooks.
• Monitored hybrid environments (on-prem + AWS: CloudTrail, GuardDuty, IAM) by ingesting logs into Sentinel for centralised detection and CSPM-aligned controls across Fortune 500 client environments.
• Integrated OSINT tools and STIX/TAXII threat intelligence feeds into Sentinel to enrich IOC investigations and proactively identify emerging threat actors.
• Conducted risk assessments and security audits using Sentinel-driven insights; delivered remediation roadmaps aligned to CIS Controls and NIST CSF, reducing client exposure across hybrid infrastructure.
• Advised on AWS IAM hardening, Zero Trust architecture, and Sentinel analytics-rule tuning, improving detection precision and reducing alert noise for Fortune 500 clients.

SOC Analyst - Walko QSR

(2021-08 - 2022-09)

• Monitored Sentinel SIEM dashboards, triaged security alerts across servers, endpoints, and network devices, and escalated confirmed incidents to L2 within defined SLA thresholds.
• Performed initial investigations into phishing emails, malware alerts, and anomalous login activity flagged via Sentinel; documented findings and remediation actions in the ticketing system.
• Maintained detailed incident reports and compliance tracking in Sentinel to support audit requirements and evidence collection.

B.Sc. - Computers - Sphoorthy Degree & PG College (2021-05)