Koteswararao Potru

About Koteswararao Potru

I am a Senior Cyber Security / SOC Engineer with 6+ years of hands-on experience in SOC operations, cloud security, SIEM/SOAR, threat hunting, and incident response across global enterprise and MSSP environments.I specialize in the Microsoft Security ecosystem, with strong expertise in Microsoft Sentinel, Defender XDR (MDE, MDO, MDI, MCAS), Splunk, and KQL-based detections. I have extensive experience handling P1/P2 security incidents, leading investigations, coordinating bridge calls, and delivering actionable remediation guidance.Key StrengthsL2/L3 SOC operations in 24×7 global MSSP environmentsAdvanced threat hunting using KQL and Defender telemetryMicrosoft Sentinel onboarding, log source integration, and optimizationSOAR automation using Azure Logic Apps (auto-enrichment & auto-closure)Endpoint investigations: isolation, IOC blocking, malware & phishing analysisClient-facing reporting, dashboards, and executive summaries TechnologiesMicrosoft Sentinel | Defender XDR | Splunk | Azure AD | Azure Security Center | AWS Guard Duty | KQL | SOAR | ServiceNow | Wireshark | PowerShellI am passionate about improving SOC efficiency, reducing alert fatigue, and strengthening security posture through automation and proactive threat detection. Open to opportunities in:SOC Engineer | Security Engineer | Sentinel Engineer | Defender XDR | Cloud SecuritySenior Cyber Security ConsultantErnst & Young (EY) LLP | Oct 2023 – PresentWorking as L2/L3 SOC Consultant supporting multiple global enterprise customers.Handle P1/P2 incidents, lead bridge calls, and coordinate stakeholders.Investigate alerts from Microsoft Defender XDR and Microsoft Sentinel.Perform endpoint investigations including isolation, IOC blocking, and remediation.Develop custom KQL queries and Sentinel analytics rules.Design and deploy SOAR playbooks using Azure Logic Apps.Lead Sentinel onboarding using Azure Lighthouse and configure log sources.Perform log source health checks and optimization.Create Sentinel workbooks, dashboards, and reports.Conduct phishing simulations and email security investigations.

Experience

1. Senior Consultant- Cybersecurity

   EY

   Oct 2023 — Present · Hyderabad, IN

Education

• JNTUH College of Engineering Hyderabad

  Bachelor of Engineering - BE, Computer Science

  2014 — 2018