Venkatesh Sathya

SOC Leadership & Operational Excellence • Successfully stabilized and scaled 24/7 SOC operations, ensuring seamless shift transitions and uninterrupted monitoring for multiple clients. • Designed and implemented SOC Standard Operating Procedures (SOPs) to significantly reduce alert triage and investigation time while improving response accuracy. • Established robust customer escalation frameworks aligned to contractual SLAs and operational KPIs. Threat Detection, SIEM & Use Case Engineering • Led SIEM operations enhancement, enabling analysts to effectively monitor, analyze, and investigate high-fidelity alerts. • Designed and governed an end-to-end Use Case Lifecycle Management process, from detection engineering to customer approval and production deployment. • Mapped detection use cases to the MITRE ATT&CK framework, ensuring alignment with real-world adversary tactics, techniques, and procedures (TTPs). • Delivered actionable insights into industry-relevant attack trends and threat vectors through structured reporting. Metrics, KPIs & SOC Maturity • Built comprehensive daily, weekly, and monthly SOC operational trackers, providing leadership with a clear and measurable view of SOC performance. • Designed role-based KPIs and KRIs for junior and senior analysts to measure efficiency, quality, and risk exposure. • Developed executive-ready SOC metrics dashboards, highlighting top alerts, threat trends, and operational bottlenecks. Talent Development & SOC Capability Building • Created learning, certification, and career roadmaps for junior, senior, and lead SOC analysts. • Implemented a performance-driven evaluation framework to objectively assess analyst growth during training and transition to production roles. Security Architecture • Played a key role in integrating the right security technologies, tools, and operational processes within startup ecosystems.

Implemented the following as a Security Operations Head. • Designed and implemented MSSP services for customers, managing 24/7 SOC operations. • Scaled the SOC team from 3 members to 25 members. • Enhanced the team’s ability to monitor, analyze, and investigate alerts in SIEM. • Established a CrowdStrike EDR monitoring team from scratch, advancing analysts to an intermediate level through hands-on training and analysis on the CrowdStrike tool. • Developed and implemented learning and career roadmaps for junior and senior analysts. • Created a trainee roadmap to help freshers scale up their technical skills, along with assessment techniques to evaluate their skillsets. • Defined a step-by-step process to evaluate freshers based on their skills and performance during the training period. • Established a robust process to address customer escalations within the SLA. • Designed comprehensive weekly and monthly metrics reports highlighting top alerts and providing insights on industry-relevant attacks and threat vectors. • Suggested and implemented new use cases based on these insights, with customer approvals. • Created SOPs to enhance alert handling and investigation methods. • Prepared the team for shift transitions to ensure 24/7 monitoring and analysis for clients. • Designed KPI and KRI metrics for junior and senior analysts.

• As a Security Operations Manager, my first priority was to build SOC operations. • Integrating the right technology, tools, and processes for the start-up ecosystem was both challenging and educational. • Hiring the right personnel for SOC operations was difficult due to funding constraints. • To address this, I developed a hire-and-train model for fresh graduates, which helped meet the current SOC analyst requirements without compromising quality.

ISOC