Tanvi Giri
Pune
Summary
Cybersecurity Specialist with 3+ years of experience in Security Operations, Incident Response, and Alert Investigation. Experienced in investigating security incidents, phishing attacks, malware detections, and network security events using SIEM, EDR, XDR, and email security solutions. Currently involved in pre-production alert validation, false positive analysis, and detection tuning to improve security coverage and alert accuracy.
Overview
4
4
years of professional experience
1
1
Certification
Work History
Cyber Security Specialist
Critical Start
Pune
04.2025 - Current
- Investigate and validate security alerts generated during the pre-production phase to determine whether detections represent true positives or false positives before production deployment.
- Performed alert investigation originating from multiple security technologies, including SIEM, EDR/XDR, Identity, Email Security, and Cloud Security solutions, to improve detection accuracy and reduce false positives.
- Analyzed recurring false positive alerts and recommended tuning improvements, including suppression filters, exclusions, and threshold adjustments based on customer-approved business activities.
- Performed technical reviews of analyst investigations by validating findings, verifying evidence, and recommending improvements where required to ensure accurate, high-quality customer deliverables before submission.
- Prepared customer validation documents for recurring false positive detections, recommending suppression filters, exclusions, and tuning actions for customer review and approval prior to production deployment.
- Prepared customer-facing documentation containing investigation findings, validation results, security risks, mitigation recommendations, and deployment guidance for true positive detections.
- Collaborate with SOC analysts and Detection Engineering teams during the tuning lifecycle of security use cases.
- Worked on mapping security incidents to MITRE ATT&CK techniques to enhance threat detection and response.
Security Analyst
Security HQ
01.2023 - 12.2025
- Monitored and investigated security alerts using IBM QRadar SIEM, performing alert triage and incident analysis to identify malicious activities while meeting SLA requirements.
- Investigated phishing, malware, endpoint, and email security incidents using Microsoft Defender, CrowdStrike Falcon, SentinelOne, Mimecast, and Darktrace Antigena.
- Performed network security investigations involving port scans, brute-force attempts, suspicious network activity, and web attack detections to identify potential threats.
- Monitored and investigated security incidents using Microsoft Sentinel, performing log analysis and event correlation to validate suspicious activities.
- Prepared incident reports, communicated investigation findings to customers, and provided containment and remediation recommendations.
- Mapped security incidents to the MITRE ATT&CK framework and collaborated with internal teams to improve detection quality and reduce recurring false positives.
Education
Bachelors of forensic science and cyber security -
Peoples college of forensic science and cyber security
Aurangabad03.2021
Intermediate PCB -
Shri Gajanan maharaj Jr college shegaon
Shegaon, Maharashtra03.2017
Skills
- Incident response and alert investigation
- Detection validation
- SIEM: IBM QRadar and Microsoft Sentinel
- Microsoft Defender XDR and MDE
- CrowdStrike Falcon
- SentinelOne
- Microsoft Defender for Office 365
- Mimecast and Proofpoint
- Frameworks: MITRE ATT&CK
Certification
• CEH, Sysap Technologies, Pune
• CCNA, Sysap Technologies, Pune
• Microsoft Certified: Azure Security Engineer Associate (AZ500)
• Microsoft Certified: Security Operations Analyst Associate (SC200)
• Various certificates achieved on Udemy Platform
• CCNA, Sysap Technologies, Pune
• Microsoft Certified: Azure Security Engineer Associate (AZ500)
• Microsoft Certified: Security Operations Analyst Associate (SC200)
• Various certificates achieved on Udemy Platform
Languages
- Marathi (Full Professional Proficiency)
- Hindi (Full Professional Proficiency)
- English (Full Professional Proficiency)
Timeline
Cyber Security Specialist
Critical Start
04.2025 - Current
Security Analyst
Security HQ
01.2023 - 12.2025
Bachelors of forensic science and cyber security -
Peoples college of forensic science and cyber security
Intermediate PCB -
Shri Gajanan maharaj Jr college shegaon