About
Senior SOC Analyst with 5 years of hands-on experience in 24x7 security operations, focused on threat detection, incident response, and building detection logic that delivers real results in enterprise environments.
Career built around monitoring threats, investigating incidents, and tuning SIEM rules that actually reduce noise for the team.
Highly experienced with Microsoft Azure Sentinel and Splunk – from malware triage and phishing investigations to writing KQL and SPL queries that improve detection coverage.
Takes incident response end-to-end seriously – first alert, root cause analysis, containment, and post-incident reporting.
Backed by solid cloud security exposure across AWS and Microsoft Azure, with working knowledge of MITRE ATT&CK framework.
What I'm looking for
Looking for a Senior SOC Analyst role in threat detection, incident response, or SIEM engineering, ideally working with tools like Splunk, Microsoft Sentinel, or similar enterprise security platforms. Open to remote, hybrid, or onsite opportunities in Bangalore. Interested in roles that offer hands-on ownership of detection logic, threat hunting, and incident response in 24x7 SOC environments, with scope to grow into broader security operations or team leadership responsibilities.
Experience
Senior SOC Analyst
Centelon IT Solutions Private Limited
Aug 2024 – Present
– Lead real-time security monitoring across firewalls, routers, Windows and Linux endpoints, web servers, and cloud assets for 10+ enterprise clients in a 24x7 SOC environment.
– Engineered and fine-tuned SIEM correlation rules in Microsoft Azure Sentinel and Splunk, reducing false-positive alert volume by 35% and making alerts significantly more actionable for the team.
– Managed end-to-end incident response for 50+ monthly security incidents including malware, phishing, and brute-force cases – root cause analysis, containment, cleanup, and post-incident reporting within agreed SLA timeframes.
– Performed log analysis and forensic investigation to identify Indicators of Compromise (IOC) and Indicators of Attack (IOA), preventing escalation of 20+ critical threats monthly.
– Conducted phishing email analysis – header inspection, URL detonation, and sandbox-based attachment analysis – successfully identifying and blocking malicious campaigns.
– Researched CVEs and emerging attack techniques using Cyber Threat Intelligence (CTI) aligned with MITRE ATT&CK, improving detection rule coverage by 25%.
– Authored and maintained SOC playbooks, incident response documentation, and SIEM architecture notes, reducing average analyst resolution time by 20%.
– Applied TCP/IP, DNS, and HTTP/S protocol knowledge to investigate lateral movement and data exfiltration patterns across enterprise networks.
Microsoft Azure SentinelSplunkIncident Response
Junior SOC Analyst
Tata Consultancy Services (TCS)
Aug 2021 – Jul 2024
– Monitored and triaged security alerts and logs for 15+ enterprise clients across a 24x7 SOC environment, maintaining 95%+ accuracy in event classification and escalation.
– Handled first-line incident response for malware, phishing, and brute-force incidents through structured investigation workflows, reducing mean response time by 30%.
– Developed KQL-based custom detection rules and security dashboards in Microsoft Azure Sentinel, improving threat visibility across client environments.
– Deployed and integrated IDS/IPS, EDR, and SIEM tooling across client infrastructure, closing detection coverage gaps for 10+ client environments.
– Created SOC runbooks and incident handling documentation, cutting analyst onboarding time by 25% and standardizing response procedures across the team.
– Collaborated on threat hunting exercises with senior analysts, identifying anomalous behavior patterns in network traffic and endpoint telemetry missed by automated tools.
Microsoft Azure SentinelKQLIDS/IPS
Education
Sri Krishnadevaraya University
Bachelor of Science · Computer Science
2021
Certifications
Microsoft SC-200
Microsoft
May 2025 – No expiry
Skills
Mitre AttackNetwork Traffic AnalysisIDS/IPSFirewallsHTTP/SDNSTCP/IPMicrosoft AzureAWSThreat HuntingCyber Threat IntelligenceCVE ResearchMITRE ATT&CKIOC/IOA IdentificationRoot Cause AnalysisBrute Force DetectionPhishing AnalysisLog ManagementMicrosoft Azure SentinelSplunk
Languages
English (Full professional proficiency)
