Ajmal

SOC Analyst Level 1

Thrissur, Kerala, India 0+ yrs exp 86 · Excellent

About

SOC Analyst with IBM Cybersecurity Analyst certification and hands-on experience in security event monitoring, alert triage, and incident response. Currently operating in a 24/7 SOC environment at Necurity Solutions using Wazuh SIEM, SentinelOne EDR, and Palo Alto NGFWs. Adept at log analysis, phishing detection, threat validation, and false positive elimination. Holds a B.Tech in Computer Science and Engineering with additional field exposure from a cybersecurity internship at Kerala Police Academy.

Skills & Expertise (37)

Wazuh SIEM Intermediate

6.5/10

Years Exp

SentinelOne EDR Intermediate

6.5/10

Years Exp

Log Analysis Intermediate

6.0/10

Years Exp

Alert Triage Intermediate

6.0/10

Years Exp

Security Event Monitoring Intermediate

6.0/10

Years Exp

Endpoint threat detection Intermediate

6.0/10

Years Exp

Palo Alto NGFW Intermediate

6.0/10

Years Exp

Phishing Analysis Intermediate

6.0/10

Years Exp

Incident Response Intermediate

6.0/10

Years Exp

Threat Detection Intermediate

6.0/10

Years Exp

LINUX Intermediate

5.5/10

Years Exp

Python Intermediate

5.5/10

Years Exp

SQL Intermediate

5.5/10

Years Exp

Windows Intermediate

5.5/10

Years Exp

Microsoft Office Mobile Security Android Java MITRE ATT&CK OSI Model SMTP ARP ICMP DHCP DNS HTTP/S UDP IP TCP False Positive Analysis Threat Intelligence VPN IPS IDS Firewall Rules Endpoint Monitoring SIEM concepts

Work Experience

SOC Analyst Level 1 (Intern)

Necurity Solutions Network Security Pvt Ltd

May 2026 - Present

Monitor and analyze security events in a 24/7 SOC environment using Wazuh SIEM, SentinelOne EDR, and Palo Alto Next-Generation Firewalls. Conduct alert triage and log analysis across endpoints, servers, and network devices to validate threats and escalate confirmed incidents. Investigate and correlate security alerts to distinguish genuine threats from false positives, improving SOC response efficiency. Support incident response workflows including initial detection, documentation, and escalation per SOC standard procedures.

Cybersecurity Intern

Kerala Police Academy

Jun 2025 - Jul 2025

Worked alongside law enforcement cybersecurity professionals, gaining practical exposure to SOC workflows, threat response procedures, and incident reporting in a live operational environment. Applied phishing detection and threat intelligence techniques; analyzed suspicious communications and reported findings using structured incident documentation.