Sivakumar Shanmugam

Cyber Security Analyst @Triskele Labs

Melbourne, AU

Monitor and triage security alerts 24/7 in a high-pressure SOC environment using advanced SIEM tools (Splunk, Microsoft Sentinel, Rapid7 InsightIDR, Elasticsearch), driving a 30% reduction in false positives and enhancing alert accuracy.• Investigate, contain, and remediate endpoint incidents using CrowdStrike Falcon, Microsoft Defender for Endpoint, and Artemis, reducing Mean Time to Respond (MTTR) from hours to sub-30 minutes.• Lead proactive threat hunting and log analysis across multiple platforms (Splunk, Sentinel, InsightIDR), uncovering hidden IOCs and reducing Mean Time to Detect (MTTD) by 40%.• Design and optimize custom correlation rules and detections for phishing, brute-force, and lateral movement attacks, increasing detection coverage and improving threat response capabilities.• Collaborate closely with Incident Response teams to mitigate high-severity threats, ensuring zero business downtime and reducing potential impact.• Spearhead the development and continuous improvement of SOC playbooks and SOPs, streamlining triage and escalation workflows, and increasing SOC efficiency by 15%.• Conduct Root Cause Analysis (RCA) on advanced endpoint threats, leveraging findings to create insightful executive dashboards in Splunk and Sentinel, enhancing system hardening by 20% and improving decision-making at leadership levels.• Maintain seamless continuity in investigations across shifts by meticulously documenting incidents and ensuring smooth handovers, fostering collaboration and operational efficiency.

Anna University Chennai

Bachelor of Engineering (B.E.)