Headline

SOC Analyst | Incident Response | SIEM | Endpoint Investigation | Microsoft Sentinel | LogRhythm | Trend Micro Vision One

About

Cybersecurity professional with hands-on enterprise SOC experience specializing in security monitoring, incident response, and endpoint investigation. I work in a non-tiered SOC model at Jio Platforms Limited, handling the complete incident lifecycle—from alert triage and investigation to containment and remediation. On a typical day, I investigate 50–70 security alerts across Microsoft Sentinel, LogRhythm, and Trend Micro Vision One, analyze attack chains, and correlate telemetry from multiple security sources to determine root cause and scope of impact. Some of the work I'm most proud of includes investigating a multi-host credential exfiltration incident involving C2 communication and a typosquatted software download site, developing backend modules for our internal SOC case management platform using Python (Flask) and MySQL, and supporting phishing investigations by analyzing malicious emails, coordinating containment actions, and performing IOC-based analysis across the environment. My investigations involve correlating telemetry from Firewall, WAF, Proxy, Active Directory, O365, and endpoint sources while mapping adversary activity to the MITRE ATT&CK framework to better understand attack progression. I'm currently looking for opportunities where I can continue growing in Security Operations and Incident Response while contributing to enterprise-scale SOC teams.

Location

Mumbai Metropolitan Region

AI stack

antigravity

codex

cursor

Work experience

SOC Analyst / Junior Engineer at Jio Platforms Limited, Oct 2023 - Present · 2 yrs 11 mos, As a SOC Analyst at Jio Platforms Limited, I work in a non-tiered Security Operations Center, managing the complete incident lifecycle from alert triage and investigation to containment and remediation across enterprise environments. Key Contributions • Investigated 50–70 security alerts daily across Microsoft Sentinel, LogRhythm, and Trend Micro Vision One while maintaining SLA compliance. • Investigated a macOS credential exfiltration incident, tracing malicious curl POST requests to a typosquatted software download site. Expanded the investigation using IOC-based analysis, identified multiple affected endpoints, and supported containment through host reimaging, credential resets, and proxy-level blocking. • Investigated phishing incidents using Trellix FireEye, Microsoft Defender for Office 365, email header analysis, and sandbox analysis. Coordinated response actions including URL blocking, sender blacklisting, and credential resets. • Performed endpoint investigations using Trend Micro Vision One by analyzing suspicious process execution, malware behavior, external communications, and IOC-based telemetry to determine the scope of impact. • Correlated telemetry from Firewall, WAF, Proxy, Active Directory, Microsoft 365, and endpoint sources to reconstruct attack timelines and map attacker activity to the MITRE ATT&CK framework. • Developed backend modules for the internal SOC Case Management Platform (Archer) using Python (Flask), MySQL, and REST APIs, reducing manual case tracking and reporting effort by 40% across the SOC team.

Education

Bachelor of Technology, Computer Science, Indian Institute of Information Technology Kota