Sarita Jena

Detection Engineer and Threat Hunter with 9+ years in SOC operations and security analytics, specializing in identifying, building, and fine-tuning detection use cases to reduce mean time to detect (MTTD). Proven track record authoring 70+ custom detection and correlation rules using KQL and AQL across Azure Sentinel and QRadar, driving false-positive reductions of up to 30% and improving detection coverage. Experienced analyzing threat intelligence and IoCs to inform new detection logic, validating use cases before production deployment, and maintaining clear, structured documentation of detection content.

Skilled identifying platform issues, tuning gaps, and improvement opportunities across SIEM/EDR environments, with hands-on experience incorporating analyst and stakeholder feedback into iterative use case refinement.

Security Analyst II - Armor Defense

(2023-08)

• Built and fine-tuned detection use cases to reduce mean time to detect (MTTD), mapping attacker TTPs to the MITRE ATT&CK framework during deep-dive investigations of escalated L2/L3 incidents.
• Analyzed threat intelligence feeds and IoCs through proactive threat hunting to identify advanced persistent threats (APTs) and zero-day exploits, feeding findings into new detection rule development.
• Maintained detection content documentation, incident response playbooks, runbooks, and SOPs aligned with the NIST framework, reducing investigation time by 25% and improving consistency across the SOC.
• Identified platform tuning gaps and process improvement opportunities across Azure and hybrid environments, incorporating analyst feedback into ongoing use case refinement.

Cybersecurity Analyst - Unisys Technology Solutions

(2022-07 - 2023-07)

• Developed and managed 20+ SIEM use cases and custom detection/correlation logic using KQL and AQL across Microsoft Sentinel, improving threat detection coverage and reducing false-positive rates.
• Analyzed customer threat intelligence from CrowdStrike Falcon and Carbon Black to correlate logs, identify lateral movement and data exfiltration, and inform new detection rule creation.
• Investigated sophisticated phishing, BEC, and malware campaigns using sandbox analysis, documenting attack vectors and translating findings into new detection use cases and preventative controls.
• Delivered threat hunting and detection training sessions to cross-functional teams, improving organizational mean time to detect (MTTD) and mean time to respond (MTTR).

Security Delivery Senior Analyst - Accenture Solutions Pvt. Ltd

(2017-10 - 2022-05)

• Authored and fine-tuned 50+ custom detection rules, analytics rules, and hunting queries using KQL, achieving a 30% reduction in false positives and strengthening detection engineering capability.
• Led the design, deployment, and migration of a Microsoft Sentinel-based SOC infrastructure for a major telecom client, including log ingestion, data connectors, and workspace architecture to support platform improvements.
• Automated IOC enrichment and blocking using Azure Logic Apps and SOAR playbooks, reducing manual response effort by 40% and validating detection logic before production rollout.
• Integrated diverse SaaS, IaaS, and on-premise application logs via REST APIs, Syslog, and CEF, performing continuous SIEM tuning, log source optimization, and platform issue identification.
• Supported finance and banking clients, ensuring compliance with PCI-DSS and GDPR requirements through security monitoring, incident response, and detection content aligned to audit and retention policies.