BHAVESH NAGPURKAR profile photo 1 on Tal

BHAVESH NAGPURKAR

SOC Analyst | CSIRT | Splunk SIEM | Threat Detection | MITRE ATT&CK | DLP | Incident Response | MSc Cybersecurity — University of York | Cisco Ethical Hacker | Open to Work

Nagpur

2+ years of work experience

Freelance
Jan 20251 yr 7 mosPresent

Remote

• Actively upskilling in SOC operations and threat detection post-MSc through structured self-study and hands-on lab work. • TryHackMe SOC Level 1 — Top 15% globally, 34 rooms including EternalBlue/MS17-010, OWASP Top 10, OSINT investigation, network traffic analysis, and threat hunting • Home Lab: Deployed Wazuh SIEM on Ubuntu with endpoint agents — practised log ingestion, Python-based alert enrichment, and detection rule refinement • Cisco Ethical Hacker — Cisco Networking Academy (2026, Credly Verified)
Phoenix Cyber Secure
Dec 20256 mosMay 2026

Remote

•Contributed to cybersecurity training programs through practical exercises in threat analysis, vulnerability assessment, and security operations. •Leveraged OSINT methodologies and the MITRE ATT&CK framework to profile threats and understand attacker behavior. •Utilized Splunk for log monitoring and analysis of endpoint and network events during SOC simulation activities. •Assisted with vulnerability assessments using Nessus, documenting CVSS-rated findings and participating in phishing, malware, and network security analysis exercises.
Forensicrat Infosec Pvt Ltd
Jan 20236 mosJun 2023

India

• Monitored and triaged 30–40 daily alerts via Splunk SIEM in a 24x7 SOC — log analysis across endpoint, proxy, IDS, firewall, and network sources; correlated TTPs to MITRE ATT&CK and Cyber Kill-Chain to detect phishing, brute-force, lateral movement, and C&C traffic patterns. • Investigated phishing, malware, and C&C incidents — analysed email headers, file hashes, suspicious URLs, and firewall anomalies; built multi-source threat profiles to separate true positives from false positives; escalated confirmed incidents with structured RCA and timeline documentation within defined SLA targets. • Identified DLP violations and insider threat indicators; triaged data exfiltration alerts and escalated with evidence documentation and risk context. • Generated SIEM reports and maintained continuous monitoring dashboards; authored incident response playbooks and SOC runbooks; automated alert enrichment using Python to reduce mean-time-to-triage; followed shift handoff procedures to communicate open incidents to incoming analysts. • Maintained SOC documentation aligned to ISO 27001 controls, ITIL ticketing, and case management workflows; supported SIEM detection rule tuning by identifying recurring false positive patterns.

Education

University of York

Master of Science - MS, CyberSecurity

University of York

20232 yrs2025

Bachelor of Technology - BTech, Computer Engineering

G H Raisoni College of Engineering and Management(GHRCEMN) ,Nagpur

20194 yrs2023

Join BHAVESH and 10k+ other professionals on

Tal Boss

Tal is the app where bosses meet engineers & builders directly, without middlemen

Download Tal Boss

BHAVESH NAGPURKAR on Tal

Headline

SOC Analyst | CSIRT | Splunk SIEM | Threat Detection | MITRE ATT&CK | DLP | Incident Response | MSc Cybersecurity — University of York | Cisco Ethical Hacker | Open to Work

About

I triage security threats, investigate IOCs, and hunt attackers — not just monitor dashboards. Hands-on 24x7 SOC experience triaging 30–40 daily alerts via Splunk SIEM — MITRE ATT&CK, DLP triage, incident response, RCA within SLA. MSc Cybersecurity — University of York, UK (2:1, 2025) | Cisco Ethical Hacker (2026) | CPTE | TryHackMe Top 15% globally. Available immediately | 24x7 shifts | Bangalore · Mumbai · Pune · Remote

Location

Nagpur

Work experience

Continuous Learning & SOC Development at Freelance, Jan 2025 - Present · 1 yr 7 mos, Remote, • Actively upskilling in SOC operations and threat detection post-MSc through structured self-study and hands-on lab work. • TryHackMe SOC Level 1 — Top 15% globally, 34 rooms including EternalBlue/MS17-010, OWASP Top 10, OSINT investigation, network traffic analysis, and threat hunting • Home Lab: Deployed Wazuh SIEM on Ubuntu with endpoint agents — practised log ingestion, Python-based alert enrichment, and detection rule refinement • Cisco Ethical Hacker — Cisco Networking Academy (2026, Credly Verified)

Cyber Security Analyst at Phoenix Cyber Secure, Dec 2025 - May 2026 · 6 mos, Remote, •Contributed to cybersecurity training programs through practical exercises in threat analysis, vulnerability assessment, and security operations. •Leveraged OSINT methodologies and the MITRE ATT&CK framework to profile threats and understand attacker behavior. •Utilized Splunk for log monitoring and analysis of endpoint and network events during SOC simulation activities. •Assisted with vulnerability assessments using Nessus, documenting CVSS-rated findings and participating in phishing, malware, and network security analysis exercises.

Security Operations Center Analyst at Forensicrat Infosec Pvt Ltd, Jan 2023 - Jun 2023 · 6 mos, India, • Monitored and triaged 30–40 daily alerts via Splunk SIEM in a 24x7 SOC — log analysis across endpoint, proxy, IDS, firewall, and network sources; correlated TTPs to MITRE ATT&CK and Cyber Kill-Chain to detect phishing, brute-force, lateral movement, and C&C traffic patterns. • Investigated phishing, malware, and C&C incidents — analysed email headers, file hashes, suspicious URLs, and firewall anomalies; built multi-source threat profiles to separate true positives from false positives; escalated confirmed incidents with structured RCA and timeline documentation within defined SLA targets. • Identified DLP violations and insider threat indicators; triaged data exfiltration alerts and escalated with evidence documentation and risk context. • Generated SIEM reports and maintained continuous monitoring dashboards; authored incident response playbooks and SOC runbooks; automated alert enrichment using Python to reduce mean-time-to-triage; followed shift handoff procedures to communicate open incidents to incoming analysts. • Maintained SOC documentation aligned to ISO 27001 controls, ITIL ticketing, and case management workflows; supported SIEM detection rule tuning by identifying recurring false positive patterns.

Education

Master of Science - MS, CyberSecurity, University of York

Bachelor of Technology - BTech, Computer Engineering, G H Raisoni College of Engineering and Management(GHRCEMN) ,Nagpur