Headline

SOC Analyst| Microsoft Sentinel | Defender for Endpoint | SentinelOne | Incident Response | Threat Analysis | SIEM & EDR Monitoring

About

As a SOC Analyst at 7-Eleven, I specialize in monitoring and investigating security alerts using tools like Splunk SIEM, Microsoft Sentinel, and Palo Alto XDR. My work focuses on identifying and analyzing authentication-based threats, such as password spray and pass-the-hash attacks, as well as responding to Active Directory and account-related alerts. I also support containment and remediation efforts during high-severity incidents. With a dual degree in Electrical and Electronics Engineering from Siksha 'O' Anusandhan University, I bring a strong technical foundation to my role. My expertise includes EDR analysis, phishing investigation, and threat detection, with a focus on improving detection accuracy and minimizing false positives within a 24/7 SOC environment.

Location

Greater Bengaluru Area

AI stack

Microsoft Copilot

Work experience

SOC Analyst at 7-Eleven, Mar 2023 - Mar 2026 · 3 yrs 1 mo, Bengaluru, Monitored and investigated security alerts generated from Splunk SIEM, Microsoft Sentinel, and Palo Alto XDR across Windows endpoints, servers, networks, and cloud environments. Investigated Windows security alerts related to successful and failed logons, abnormal authentication attempts, and suspicious account activities. Analyzed Active Directory alerts for unauthorized user account creation, deletion, modification, and privilege escalation events. Investigated password spray attacks by identifying multiple authentication failures across numerous accounts from single or distributed source IPs. Detected and responded to pass-the-hash attacks by analyzing NTLM authentication patterns, abnormal SMB sessions, and lateral authentication behavior. Investigated Kerberos authentication alerts including brute-force attempts, ticket misuse, and suspicious service ticket requests. Analyzed Azure AD sign-in alerts for impossible travel, risky sign-ins, legacy authentication abuse, and suspicious login locations. Oversaw a team that conducted quarterly security audits, identifying 20+ potential vulnerabilities. Responded to malicious process execution alerts by analyzing process trees, command-line arguments, and parent-child relationships using EDR tools. Investigated PowerShell execution alerts, including encoded and obfuscated commands, remote PowerShell usage, and suspicious script behavior. Analyzed scheduled task creation and modification alerts used as persistence mechanisms on compromised systems. Investigated persistence techniques including registry Run keys, startup folder changes, services creation, and WMI event subscriptions. Detected and investigated lateral movement alerts involving SMB, RDP, WMI, PsExec, and abnormal admin share access. Utilize Palo Alto XDR to investigate and respond to security incidents.. Investigated proxy-related alerts indicating suspicious outbound web traffic, access to malicious or newly registered domains.

Security Analyst at NCR Voyix, Dec 2019 - Feb 2023 · 3 yrs 3 mos, Hyderabad, Working on monitoring of alerts, analyzing, coordinating with concerned teams with remediation steps and triaging them as True positive and False Positive. • Monitoring and reporting the abnormalities in Dashboard Graphs • or in the stats. Working on malware analysis and identifying the malicious IOCs-indicator of compromise, taking action around IOCs identified. • Working on security threat Intel Advisories and identifying the IOCs from Advisories and ensuring the IOCs are getting blocked on security tools • • Creation of ServiceNow Tickets with different support teams based on the alerts Requirement. • Reconciling the log sources in SPLUNK on monthly basis. Working on SPAM/Phishing mail submissions by users, analyzing them and taking relevant actions. • • Good at Windows concepts like Active Directories, User creation etc. • Providing logs to different team from Splunk as and when request for logs is received. Ensuring all the ServiceNow Tickets are being properly tracked and closed with proper Justification.

Education

Dual degree Engineering, Electrical and Electronics Engineering, Siksha 'O'​ Anusandhan University