Akshay Jha

SOC Analyst

Accenture

Nov 2023 - Present

Conducted 24x7 real-time security monitoring, threat detection, and incident triage using Google SecOps (Chronicle) and Microsoft Defender XDR, enabling rapid identification, investigation, and containment of security incidents. Led end-to-end investigations of phishing, malicious URLs, malware, endpoint compromise, suspicious authentication, and account compromise incidents, ensuring timely remediation and adherence to client SLAs. Performed detailed threat analysis by correlating logs, endpoint telemetry, email artifacts, and authentication events to determine attack scope, root cause, and potential business impact. Leveraged threat intelligence and reputation platforms, including VirusTotal, URLScan, and AbuseIPDB, to validate Indicators of Compromise (IOCs), enrich investigations, and improve detection accuracy. Investigated identity-based threats using Microsoft Entra ID logs, analyzing sign-in activities, user behavior, conditional access events, and authentication anomalies to identify unauthorized access attempts. Collaborated closely with the Google SecOps engineering team to optimize SIEM dashboards, enhance automation playbooks, and improve detection use cases, reducing operational overhead. Fine-tuned SIEM correlation rules and detection logic to reduce false positives, enhance alert fidelity, and strengthen overall security monitoring capabilities. Analyzed weekly and monthly threat intelligence reports from trusted third-party intelligence sources and translated emerging threats into actionable detections by creating or refining SIEM use cases. Prepared and presented weekly and monthly security reports to clients, summarizing incident trends, investigation outcomes, key security metrics, and recommendations for continuous improvement. Identified and implemented process improvements that enhanced SOC operational efficiency and reduced incident response times. Delivered technical Knowledge Transfer (KT) sessions to newly onboarded L1 and L2 SOC analysts, improving team readiness and standardizing investigation methodologies. Coordinated monthly virtual team engagement initiatives across multiple Accenture teams supporting the client, collaborating with senior management to strengthen cross-functional communication and team collaboration. Conducted periodic Blue Team exercises in collaboration with client stakeholders, simulating real-world cyberattack scenarios and security incidents. Performed both L1 and L2 SOC analyst responsibilities during exercises, including alert triage, investigation, escalation, incident response, and presenting findings to demonstrate SOC readiness and improve incident handling procedures.