Sagar Dana

Security Operations Center (SOC) Analyst with nearly 3 years of experience in monitoring, detecting, and responding to cybersecurity threats. Proficient in SIEM tools, EDR solutions, and security monitoring. Strong expertise in incident response, phishing analysis, threat hunting, and log analysis. Skilled in reducing false positives, improving detection use cases, and ensuring compliance with security standards.

Security Operations Analyst at The Website Makers (2024-10 – Present)

• Monitored and analyzed security alerts using SIEM tools in a 24x7 SOC environment.
• Performed alert triage, reducing false positives and escalating validated incidents to L2 teams.
• Investigated phishing attacks by analyzing email headers, links, and attachments.
• Conducted endpoint investigations using SentinelOne (EDR) to detect and contain threats.
• Identified web-based attacks (XSS, SQL Injection) and suspicious IP behavior.
• Performed IP reputation analysis using threat intelligence platforms.
• Managed incidents in ServiceNow, ensuring compliance with ITIL processes.
• Developed and optimized SIEM use cases, improving detection accuracy.
• Collaborated with security teams and mentored junior analysts.

Security Operations Analyst L1 at 3 COLUMNS (2023-07 – 2024-09)

• Performed real-time monitoring and analysis of security events across multiple log sources.
• Conducted root cause analysis (RCA) and provided mitigation strategies.
• Ensured incidents were handled within SLA timelines.
• Performed threat hunting using tools like CrowdStrike, SentinelOne, Rapid7, and VirusTotal.
• Collected and analyzed Indicators of Compromise (IOCs) from OSINT sources.
• Specialized in phishing detection and response.
• Participated in ongoing cybersecurity training and upskilling.

Bachelor of Engineering in BE – Bheemanna Khandre Institute of Technology (2023)