--- title: "Shahnavi B - Cybersecurity Intern in Bengaluru | Tal" description: "Meet Shahnavi B, SOC Analyst | Threat Investigation & Incident Response | Splunk • SentinelOne • Phishing & Malware Analysis based in Bengaluru." image: "https://tal.club/meet/shahnavi-b/share-image" --- # Shahnavi B on Tal ## Headline SOC Analyst \| Threat Investigation & Incident Response \| Splunk • SentinelOne • Phishing & Malware Analysis ## About Most SOC alerts get closed in 3 minutes\. The dangerous ones get missed because the analyst didn't know what to look for\. I started in forensic science, examining questioned documents, fingerprints, and physical evidence under pressure with zero margin for error\. That training taught me something most cybersecurity freshers don't have: how to build a case, not just check a box\. I pivoted into cybersecurity because the skill set transferred perfectly, just digital evidence instead of physical\. Over 12 months as a SOC Intern at Avigdor CyberTech, I triaged 80–100 Splunk SIEM alerts weekly across phishing, ransomware, malware, brute force, and impossible travel scenarios\. I investigated 15\+ phishing cases end\-to\-end, from email header analysis and SPF/DKIM/DMARC validation to sandbox detonation and escalation to L2 with fully documented IOC timelines\. I worked across Splunk, SentinelOne EDR, VirusTotal, URLScan, and ServiceNow in live SOC workflows\. What I bring that most entry\-level analysts don't: → Forensic\-trained analytical thinking, I look for what's missing, not just what's visible → 12 months of real alert triage, not just lab simulations → Structured documentation habit built from evidence reporting I'm actively seeking SOC Analyst L1 or Cybersecurity Analyst roles on\-site, hybrid, or remote, in Bengaluru or beyond\. If you're hiring or know someone who is, let's connect ## Location Bengaluru ## Work experience Cybersecurity Intern at Avigdor CyberTech, Feb 2025 \- Feb 2026 · 1 yr 1 mo, Bengaluru, For a year, I worked Tier 1 in a live SOC, meaning every day started with a queue of alerts and the job was figuring out which ones were real threats and which ones were noise\. That distinction matters more than most people realize\. A missed true positive is an incident\. A bad false positive wastes everyone's time\. My job was to get that call right, document it properly, and hand it off cleanly\. The bulk of my day was spent on Splunk, triaging 80 to 100 alerts across phishing, ransomware, malware, brute force, and impossible travel scenarios\. Not just flagging them, but actually investigating: pulling logs, correlating events, checking what happened before and after the alert fired\. Phishing was where I spent the most focused time\. When a user reported a suspicious email, I'd go through the full chain, headers, SPF/DKIM/DMARC records, the sending domain's reputation, every URL run through URLScan, attachments detonated in sandbox\. By the end, I'd have a verdict and a documented case ready for L2\. I handled 15\+ of these end to end\. For IOC validation, everything suspicious, IPs, domains, file hashes, URLs, went through VirusTotal and cross\-referenced against threat intel before I made any escalation call\. On the endpoint side, I worked in SentinelOne EDR reviewing process behavior, command\-line activity, login patterns, and quarantine logs\. When something looked genuinely bad, I'd support containment, isolations, flagging for full disk scans, before handing it upward with full documentation in ServiceNow\. The forensic science background turned out to be surprisingly useful here\. Evidence is evidence, digital or physical\. You build a case, you document it, you don't jump to conclusions\. That mindset fit SOC work better than I expected when I made the pivot\. Intern at State Forensic Science Laboratory, Dec 2022 \- Dec 2022 · 1 mo, Shimla, Himachal Pradesh, India, Assisted forensic experts in conducting examinations and analysis of questioned documents\. Utilized specialized equipment and techniques to identify and verify signatures, handwriting, and alterations in documents\. Collaborated with fingerprint experts to analyze and compare fingerprints for identification purposes\. Prepared comprehensive reports detailing findings and presented them to senior forensic analysts\. ## Education Master of Science \- MS, Forensic science, Jain \(Deemed\-to\-be University\) Bachelor's degree, Biomedical science, Nitte University [View the original profile](https://tal.club/meet/shahnavi-b) ```json { "@context": "https://schema.org", "@graph": [ { "@type": "Person", "@id": "https://tal.club/meet/shahnavi-b#person", "name": "Shahnavi B", "url": "https://tal.club/meet/shahnavi-b", "image": "https://tal.club/meet/shahnavi-b/profile-photo.jpg", "description": "Meet Shahnavi B, SOC Analyst | Threat Investigation & Incident Response | Splunk • SentinelOne • Phishing & Malware Analysis based in Bengaluru.", "jobTitle": "Cybersecurity Intern", "worksFor": { "@type": "Organization", "name": "Avigdor CyberTech" }, "hasOccupation": { "@type": "Occupation", "name": "Cybersecurity Intern" }, "homeLocation": { "@type": "Place", "name": "Bengaluru" }, "alumniOf": [ { "@type": "EducationalOrganization", "name": "Jain (Deemed-to-be University)" }, { "@type": "EducationalOrganization", "name": "Nitte University" } ], "mainEntityOfPage": { "@id": "https://tal.club/meet/shahnavi-b#webpage" } }, { "@type": "ProfilePage", "@id": "https://tal.club/meet/shahnavi-b#webpage", "url": "https://tal.club/meet/shahnavi-b", "name": "Shahnavi B on Tal", "description": "Meet Shahnavi B, SOC Analyst | Threat Investigation & Incident Response | Splunk • SentinelOne • Phishing & Malware Analysis based in Bengaluru.", "dateModified": "2026-06-10T13:55:50.213Z", "isPartOf": { "@id": "https://tal.club/#website" }, "mainEntity": { "@id": "https://tal.club/meet/shahnavi-b#person" }, "primaryImageOfPage": { "@type": "ImageObject", "url": "https://tal.club/meet/shahnavi-b/profile-photo.jpg", "contentUrl": "https://tal.club/meet/shahnavi-b/profile-photo.jpg", "caption": "Shahnavi B profile photo on Tal" }, "inLanguage": "en-IN" } ] } ```