/ Threat hunting · DFIR · UAE

Sharon
D’Souza

Security Threat Hunter · Team Lead, Accenture

Nine years spent on what the alert did not say. I run hypothesis-driven hunts across EDR and SIEM telemetry, lead incident response from first triage to closure, and turn forensic findings into detections that hold.

Open to threat hunting, DFIR and cyber defence roles across the UAE.

Sharon D’Souza
Threat hunting Incident response Digital forensics EDR / SIEM

/ Experience

2017 → NOW

Six roles, one discipline

  1. Security Threat Hunter, Team Lead

    Accenture · Apr 2024 – Present · Mumbai

    • Leads proactive, hypothesis-driven hunting engagements for global enterprise clients, aimed at advanced adversary behaviour.
    • Designs and executes behaviour-based hunting strategies across EDR and SIEM telemetry to surface stealthy threats.
    • Runs deep-dive investigations into suspicious endpoint and network activity, validating findings so response lands faster.

  2. Senior Cyber Security Associate

    Ankura Consulting · Jun 2022 – Apr 2024 · Mumbai

    • Ran in-depth forensic analysis of security incidents, preserving digital evidence to establish root cause and inform preventive measures.
    • Worked with the MDR team on network traffic analysis, alert review and anomaly investigation using SIEM and endpoint tooling.

  3. Senior Cyber Security Analyst

    Network Intelligence · Dec 2021 – Jun 2022 · Mumbai

    • Oversaw network security operations, using specialist tooling to analyse and detect threats and vulnerabilities.
    • Handled initial triage, incident declaration, case creation, evidence gathering and status tracking through to closure.

  4. Solution Architect

    Inspira Enterprise · Jan 2021 – Dec 2021 · Mumbai

    • Designed and implemented SIEM solutions on Microsoft Sentinel, tuning configurations to client requirements and strengthening security posture.

  5. Cyber Security Consultant

    PricewaterhouseCoopers · Sep 2019 – Feb 2020 · Mumbai

    • Collaborated on cloud investigations, memory forensics, mobile forensics and email investigations to support case resolution.

  6. Cyber Forensic Analyst Specialist

    Advisory and Intervention Group · Mar 2017 – Sep 2019 · Mumbai

    • Investigated communication patterns and analysed email headers across case work.
    • Built narrative frameworks that made communication timelines readable for non-technical stakeholders.

/ Toolchain & credentials

What I work with

Endpoint detection & response

  • Microsoft Defender
  • CrowdStrike
  • Carbon Black
  • Morphisec
  • Rapid7
  • Nessus
  • Obsidian

SIEM & analytics

  • Splunk
  • Microsoft Sentinel
  • ArcSight

Forensics

  • Nuix
  • EnCase
  • FTK
  • Autopsy
  • Volatility

Core skills

  • Threat Hunting
  • Incident Response
  • Digital Forensics
  • MITRE ATT&CK
  • Detection Engineering
  • Security Monitoring

Certifications

  • CHFI Computer Hacking Forensic Investigator, EC-Council
  • CIFR Cyber Investigation & Forensic Response, Accenture
  • AZ-900 Microsoft Azure Fundamentals

Education

  • Master’s, Information Technology University Department of Information Technology, Santacruz, 2016
  • Bachelor’s, Information Technology ICLES Motilal Jhunjhunwala College, Vashi, 2014

/ Beyond the hunt

Training, speaking, knowledge sharing

  • Delivered DFIR training to cybersecurity professionals at Maharashtra Cyber, and contributed there as a cybersecurity speaker.
  • Spoke at Maharashtra Cyber Training, sharing practical insight and expertise in digital forensics and incident response.
  • Served as a cybersecurity trainer at the Boston Institute of Analytics, teaching and mentoring learners across core cybersecurity concepts and practice.