I’m Devaraj Govindhan, a cybersecurity professional with 4.5 years of hands-on experience across Security Operations, Incident Response, Threat Detection, Threat Hunting, SIEM/EDR, Penetration Testing, and Vulnerability Assessment. Currently, I work in Security Operations, where I handle the end-to-end security incident lifecycle from alert triage, investigation, and threat analysis through incident validation, severity assessment, client communication, RCA, and recommendations. I work closely with stakeholders to understand the impact of security incidents, provide actionable recommendations, and support remediation and mitigation activities. My current experience includes SIEM monitoring, EDR investigations, threat detection, alert correlation, incident investigation, Threat Hunting, Root Cause Analysis (RCA), IOC analysis, MITRE ATT&CK mapping, escalation, and security monitoring. I focus on distinguishing genuine security threats from false positives and ensuring that incidents are investigated thoroughly with clear findings and actionable remediation guidance. I have hands-on experience with Microsoft Sentinel, Microsoft Defender, SentinalOne EDR, Crowdstrike EDR, Splunk, Seceon, Wazuh, and other security monitoring technologies, along with analyzing security events, logs, endpoint activity, network indicators, and threat intelligence to identify and investigate potential attacks. My role also involves client-facing communication, where I communicate technical findings, incident impact, investigation results, and recommended remediation steps in a clear and actionable manner. In addition to my technical security experience, I have hands-on experience in ISO/IEC 27001 implementation and internal audits, supporting information security governance and compliance activities. This has provided me with practical exposure to ISMS implementation, risk assessment, security controls, documentation, compliance requirements, audit preparation, and internal control assessments, giving me a broader understanding of information security beyond technical operations. My background in Offensive Security further strengthens my SOC capabilities. Earlier in my career, I worked as a Penetration Tester, performing Vulnerability Assessment and Penetration Testing (VAPT) across Web Applications, APIs, Networks, and Infrastructure. This experience helps me understand attacker methodologies, exploitation techniques, vulnerabilities, and attack paths, allowing me to apply an attacker’s perspective to defensive security operations. I’m passionate about Threat Hunting, Incident Response, Detection Engineering, Threat Intelligence, Vulnerability Research, and Application Security, with a strong focus on continuous hands-on learning through security labs, CTFs, research, and real-world security investigations. I hold certifications including Microsoft Certified: Security Operations Analyst (SC-200), ISC2 CC, Certified Network Pentester, Certified Application Security Practitione, EHE, CEH, CCNA, and MCSE, reflecting my commitment to continuously strengthening my technical expertise across offensive and defensive security. I bring together offensive security experience, SOC operations, threat investigation, and security research to analyze threats from both an attacker’s and defender’s perspective, improve security visibility, and support effective detection, response, and remediation.