s
sangramsahani2

Sangram S

@sangramsahani2

CYBERSECURITY ENGINEER

India
Engels
Sommige informatie wordt in het Engels weergegeven.
Over mij
I am a Cloud Security Engineer specializing in Microsoft Sentinel and the Defender suite. I have expertise in deploying Sentinel and Defender security products and developing and tuning detection rules, custom parsers, and hunting queries (KQL) to identify advanced threats. I am skilled in Detection-as-Code (DaC) methodologies.... Lees meer

Skills

s
sangramsahani2
Sangram S
offline • 

Bekijk mijn diensten

Programmering en technologie
I will be your kql expert for custom detections and threat hunting

Portfolio

Werkervaring

Accenture

Cybersecurity Engineer

Accenture • Fulltime

Oct 2021 - Present4 yrs 9 mos

Supported the design and implementation of threat detection and response workflows using Microsoft Sentinel and Microsoft Defender suite (MDE, MDI, MDO, MDCA). Assisted in onboarding non-native log sources (e.g., third-party firewalls, threat intelligence feeds) into Sentinel through built-in and custom data connectors. Worked with diverse log formats (JSON, Syslog, CEF, CSV) and applied KQL functions/Data Collection Rules (DCRs) for normalization and parsing to ensure accurate ingestion. Contributed to the development and fine-tuning of detection content, including scheduled queries and analytics rules, mapped to MITRE ATT&CK techniques.