Shaik Amir

SOC professional with 5 years of experience focused on protecting enterprise environments through real-time monitoring and rapid incident response. Specialized in the Microsoft Sentinel and CrowdStrike ecosystem, with a deep focus on Containment and Remediation. Proven track record of taking over complex alerts and "stopping the bleeding" through host isolation and malicious process management.

ant Solutions Pvt. Ltd. | Hyderabad, Telangana June 2023 – Present • Handle daily escalations for P1/P2 security incidents, focusing on reducing the Mean Time to Contain (MTTC) through quick triage and host isolation.

• Use CrowdStrike to isolate compromised hosts and quarantine malicious files, stopping the lateral spread of threats across 100+ endpoints.
• Monitor Sentinel alerts and update KQL queries to filter out known-safe activity, successfully reducing false-positive noise by 30% for the team.
• Analyze suspicious emails and links using web-based sandboxes to verify threats; handle an average of 20+ phishing investigations weekly.
• Log all incident findings in ServiceNow and coordinate with IT teams to ensure 100% remediation of identified vulnerabilities.
• Help junior analysts understand the steps for investigating Discovery and Lateral Movement alerts to improve overall team response quality.

B-tech in the feels of electronics & communication