Sayak G.

WORK HISTORY

EDUCATION

ABOUT SAYAK G.

Highly proficient and results-driven Security Operations Center (SOC) Analyst with experience in advanced threat detection, incident response, and cybersecurity operations. Expertly utilizes a comprehensive security stack, including SIEM (Sumo Logic), EDR (SentinelOne, MS Defender), SOAR, and ServiceNow, to protect critical infrastructure. Proven track record in successfully mitigating sophisticated attacks, including malware, phishing, DDoS, and insider threats, while rigorously applying CIA Triad (Confidentiality, Integrity, Availability) principles.Currently advancing skills in leadership and operational improvement, actively exploring the integration of Generative AI for task automation, predictive threat modeling, and significant enhancements to overall SOC efficiency and analyst workflow. Adept at bridging technical analysis with operational strategy to improve security posture and manage complex security challenges.Act as the primary liaison between the SOC team and senior management (CISO), other IT departments, and external stakeholders, ensuring clear and timely communication, especially during incidents.Implement strategies to manage alert fatigue and high-stress environments to retain skilled talent.Develop, implement, and continually test the organization\'s Incident Response (IR) plan and standard operating procedures (SOPs) or playbooks for handling various types of security events.Oversee the triage and escalation process, stepping in to lead the coordinated response to high-severity incidents.Threat & Incident Management: Proficient in the entire incident lifecycle, from initial triage and analysis using IOCs to final containment and data exfiltration prevention.Security Tool Expertise: Hands-on mastery of diverse platforms: ServiceNow, SIEM, MS Entra, MS Defender, Sentinel One, EDR, Sumo Logic, ReliaQuest, and Grey Matter (SOAR).Threat Mitigation: Proven experience in mitigating a wide range of cyber risks, including malware, phishing campaigns, DDoS attacks, and insider threats.Strategic & Operational Focus: Applying the CIA Triad to all operations and actively driving innovation through Gen AI research to automate tasks and improve the SOC management framework.