SOC
Threat Detection
Alert triage, log correlation, threat hunting, MITRE ATT&CK mapping, false-positive reduction and incident validation.
AVAILABLE FOR CYBERSECURITY ROLES
CYBERSECURITY ANALYST / SOC / THREAT DETECTION
DEFEND.
DETECT.
RESPOND.
Cybersecurity Analyst with 3+ years of SOC experience focused on threat monitoring, incident response, SIEM/EDR investigations, threat hunting, vulnerability management, IAM, and cloud security.
$ whoami
sai-charan-annam
$ mission --status
[ONLINE] Detecting threats...
[ONLINE] Correlating telemetry...
[ONLINE] Hunting adversary behavior...
[READY] Incident response playbooks loaded.
$ focus
SIEM · EDR · IAM · THREAT HUNTING · VULN MGMT · CLOUD
$ echo "security is a continuous process"
security is a continuous process
15K+daily events analyzed
40+detection rules & dashboards
120+critical IAM vulnerabilities
2Mmonthly identity requests
01 // PROFILE
Security-minded.
Evidence-driven.
I work at the intersection of security operations, identity, cloud, and detection engineering—turning telemetry into actionable investigations and measurable risk reduction.
IR
Incident Response
Investigating phishing, ransomware, malware and unauthorized-access activity with containment, remediation and RCA workflows.
RISK
Vulnerability Management
CVE analysis, risk scoring, remediation tracking and patch coordination across identity, endpoint and cloud environments.
02 // OPERATIONS
Experience
under pressure.
Selected impact from security operations roles, emphasizing measurable outcomes and the systems behind them.
Cybersecurity Analyst
APR 2025 — PRESENTWELLS FARGO · USA
- Analyzed 15,000+ daily events and 250+ incidents across IAM and Zero Trust environments.
- Built 40+ Splunk detection rules and dashboards, identifying 500+ suspicious access patterns.
- Reduced unauthorized network/external-access risk by 30% through traffic and proxy analysis.
- Led remediation tracking for 120+ critical IAM vulnerabilities with 65% closure within compliance deadlines.
- Monitored 2M monthly identity-service requests using AWS security controls and secure API monitoring.
- Applied RBAC governance across 5,000+ accounts and automated repetitive work with PowerShell.
Cybersecurity Analyst
AUG 2022 — JUL 2024INFOSYS · INDIA
- Investigated 1,500+ monthly alerts through triage and proactive threat hunting across cloud/SASE environments.
- Reduced non-actionable alerts by 45% and improved threat-correlation accuracy by 40% through normalization and tuning.
- Used EDR telemetry and DNS patterns to contain 200+ incidents annually and prevent 300+ malicious connections.
- Developed risk-scoring models and coordinated patch management to improve vulnerability prioritization.
- Strengthened Windows security and enterprise policies, improving compliance scores by 40%.
03 // SECURITY ARSENAL
Tools. Tactics.
Telemetry.
A practical stack spanning monitoring, endpoint security, identity, cloud, networks, vulnerability management and automation.
Security Operations
Security MonitoringIncident ResponseAlert TriageThreat HuntingMalware AnalysisPhishing InvestigationMITRE ATT&CK
SIEM & Log Analysis
SplunkIBM QRadarMicrosoft SentinelSecuronixLog CorrelationEvent NormalizationFalse Positive Reduction
Endpoint & Network
SentinelOneMicrosoft Defender XDRTCP/IPDNSHTTP/SFirewallsIDS/IPSVPNProxy SecurityEDR
Vulnerability
NessusQualysCVE AnalysisRisk ScoringPatch ManagementRemediation Tracking
Cloud & Application
AWS SecurityAzure Security CenterIAMOWASP Top 10WAFSecure API Monitoring
Identity & Automation
RBACMFAPAMActive DirectoryPowerShellPythonBashSecurity Automation
04 // SECURITY LABS
Hands-on
security research.
Practical work that demonstrates investigation, web security and defensive engineering beyond a list of tools.
WEB SECURITY
Content Security Policy Assessment
Security assessment and proof-of-concept documentation around CSP, XSS, data exfiltration, clickjacking, malicious scripts and form-action controls.
CSPXSSClickjackingHTTP Security
HANDS-ON
TryHackMe Lab Journey
Hands-on security learning across networking, reconnaissance, web security and defensive concepts through a public TryHackMe profile.
SOCLinuxWebSecurity Labs
ENGINEERING
Security Automation
Automation mindset using Python, PowerShell and SOAR workflows to reduce manual investigation effort and accelerate response.
PythonPowerShellSOAR
05 // LIVE PROFILE
TryHackMe
operator profile.
The portfolio attempts to read the public profile server-side and displays the result when available. The source profile is always one click away.
PUBLIC PROFILE
Saicharan62
● Hands-on security learning
● Public profile: tryhackme.com/p/Saicharan62
If TryHackMe changes its page structure or blocks automated reads, the score card safely falls back to the live-profile button instead of showing a fabricated number.
06 // CREDENTIALS
Continuous
learning.
Certifications and focused training supporting the security operations profile.
01
Certified Ethical Hacker (CEH)LinkedIn
02
Cybersecurity with Cloud ComputingLinkedIn
03
Threat Protection with Microsoft Defender XDRMicrosoft
04
Introduction to Threat HuntingSecurity Blue Team
05
Security Fundamentals (SC-900)Microsoft
06
Introduction to Dark Web, Anonymity and CryptocurrencyEC-Council
07
AWS Educate: Getting Started with SecurityAmazon Web Services
08
Cybersecurity Essentials (LFC108)Linux Foundations
09
SQL Injection AttackEC-Council
10
Pre-Security CertificateTryHackMe
07 // EDUCATION
Foundation
meets practice.
2024 — 2025
Master’s in Cyber Security
SACRED HEART UNIVERSITY
Network Security · Vulnerability Management · Digital Forensics · Threat Hunting · Ethical Hacking · Web & Database Security · Cyber Crime Investigation
2020 — 2024
Bachelor’s in Cyber Security
SWAMI VIVEKANANDA INSTITUTE OF TECHNOLOGY
Operating Systems · Networking · Data Structures · OOP · Cryptography & Network Security · DBMS · Blockchain · Internet of Things
08 // CONTACT
Let's secure
what matters.
For cybersecurity analyst, SOC, threat detection, vulnerability management or security engineering opportunities, reach out directly.
SAI CHARAN ANNAM
Cybersecurity Analyst
SIEM · EDR · Incident Response · Threat Hunting · IAM · Cloud Security
START A CONVERSATION →