Yashpal Anand

About Yashpal Anand

Microsoft Certified Security Analyst with 4+ years of experience in SOC Operations, Incident Response, Threat Hunting, and Cloud Security. Skilled with Microsoft Sentinel, Defender, QRadar, Wiz, Abnormal AI, and SOAR automation. Experienced in building detection use cases, KQL-based analytics, MITRE ATT & CK mapping, and reducing false positives. Looking for opportunities in SOC, Security Engineering, Security Automation, or Security Architecture roles.

Experience

1. Cyber Security Analyst L3

   Wipro

   Dec 2025 — Present · Bengaluru, IN

   Work in a 24/7 SOC environment and handle triage/response for high-severity alerts from Microsoft Sentinel, Microsoft Defender, Wiz, Abnormal Security AI, and other integrated SIEM/SOAR platforms. • Perform deep-dive analysis, threat classification, and risk assessment mapped to MITRE ATT & CK, determining impact and executing containment, eradication, and recovery activities. • Investigate and close incidents within SLA using Kusto Query Language (KQL), TI enrichment, and cross-platform log correlation, improving MTTR by an estimated 25-30%. • Conduct Sentinel platform health monitoring-verifying log ingestion, connector status, analytics rule performance, workspace cost optimization, and data retention functions. • Drive alert tuning and detection engineering, reducing false positives by implementing rule optimization, threshold adjustments, entity mapping, and UEBA-based contextual evaluation. • Develop new detection use cases, behavioral analytics rules, and threat models aligned with emerging TTPs and customer-specific requirements. • Build and maintain Standard Operating Procedures (SOPs) for newly onboarded alerts and incident categories, ensuring consistent response execution across analysts. • Review, investigate, and take remediation actions on Abnormal Security AI detections to counter advanced BEC, impersonation, vendor fraud, and phishing attacks. • Propose and build SOAR automations, Logic App playbooks, and custom Power Automate workflows that reduce manual workload and save ~10-15 analyst hours per month. • Provide continuous client communication-sharing RCA, remediation updates, and threat insights while maintaining strong stakeholder alignment.

Education

• Birla Institute of Technology and Science, Pilani

  Master of Technology - MTech

• Patliputra University

  Computer Science