Microsoft Sentinel · KQL · Splunk · MITRE ATT&CK · Xposr · Sentrix
I design detection pipelines, operate SOC infrastructure, and independently ship commercial cybersecurity platforms. Xposr exposes verified risk across your attack surface. Sentrix engineers the detections that catch it. Both live, billed, and in production.
Amanpreet Singh Matharu
// 00 — Profile
I am a Cyber Security Engineer actively seeking my next role in SOC operations or detection engineering. With 5+ years across SIEM platforms, endpoint security, and real-world threat detection, I can contribute to a security team from day one — no ramp-up period needed. Skilled Worker Visa active. Available immediately.
I design and operate SIEM-based detections using Microsoft Sentinel (KQL) and Splunk (SPL) — investigating incidents, tuning alerts, reducing false positives, and improving detection quality. All work is aligned to MITRE ATT&CK, covering identity abuse, MFA fatigue, PowerShell misuse, ransomware indicators, and lateral movement.
Beyond traditional security work, I independently design and ship commercial cybersecurity platforms. Xposr — expose what's real. Verification-first security assessment: every finding Confirmed, Likely, or Unverified — no noise. Sentrix — engineer what detects it. SOC rule management from raw log to production-ready Sigma rule. Both are live, billed, and in production.
Currently contracted at Guard IQ (M365, Atera RMM, Huntress EDR) while developing both platforms. I thrive in fast-paced environments, take ownership of problems end-to-end, and communicate clearly with both technical and non-technical stakeholders. Looking for a full-time role where I can protect real infrastructure with real detections.
// 01 — Expertise
// 02 — Portfolio
No more false-positive noise. Xposr runs 22 parallel scanner modules and classifies every finding as Confirmed, Likely, or Unverified — giving security teams actionable signal, not raw output.
From raw log to production rule — Sentrix connects your signals, Sigma rules, and MITRE ATT&CK coverage into one engineered detection workflow. Bring-your-own LLM key for AI-assisted rule generation.
sentrix_ API keys for programmatic SOC integration// 03 — Career
sentrix_ API keys for programmatic access. Deployed on Vercel.// 04 — Academic
// 05 — Connect
Open to SOC Analyst, Detection Engineer, and Security Infrastructure roles across England — on-site, hybrid, or remote. Skilled Worker Visa active. Also open to SaaS collaboration and cybersecurity product partnerships around Xposr and Sentrix.