AMAAN Khan

SOC Analyst L1

Mumbai, India 4+ yrs exp 95 · Outstanding

About

IT Security & Technical Support Professional with 5+ years of hands-on experience spanning Security Operations (SOC), enterprise end-user/systems support (EUS), and network infrastructure. Proven track record of protecting corporate environments, optimizing IT operations, and resolving complex technical issues for global enterprises. Operates across the full spectrum of IT & Security — from packet-level network troubleshooting to managing cross-platform endpoints and investigating high-priority security incidents in a 24x7 SOC environment.

Skills & Expertise (30)

Security Operations Advanced

8.1/10

Years Exp

Splunk Advanced

8.0/10

Years Exp

CrowdStrike Falcon Advanced

8.0/10

Years Exp

Incident Response Advanced

8.0/10

Years Exp

Threat Analysis Advanced

8.0/10

Years Exp

MITRE ATT&CK Advanced

8.0/10

Years Exp

QRadar SIEM Advanced

7.8/10

Years Exp

EDR Advanced

7.5/10

Years Exp

Malware Analysis Advanced

7.5/10

Years Exp

Triage Advanced

7.5/10

Years Exp

Phishing Investigation Advanced

7.5/10

Years Exp

IoC Identification Advanced

7.5/10

Years Exp

WIZ cloud Security Advanced

7.5/10

Years Exp

VirusTotal Advanced

7.0/10

Years Exp

Zscaler zia Advanced

7.0/10

Years Exp

ServiceNow Intermediate

6.5/10

Years Exp

Active Directory Intermediate

6.5/10

Years Exp

Azure AD Intermediate

6.5/10

Years Exp

Entra ID Intermediate

6.0/10

Years Exp

WIRESHARK Intermediate

6.0/10

Years Exp

SCCM Intermediate

5.5/10

Years Exp

JAMF Pro Intermediate

5.5/10

Years Exp

Anydesk Intermediate

5.0/10

Years Exp

TeamViewer Intermediate

5.0/10

Years Exp

Putty Intermediate

5.0/10

Years Exp

SolarWinds Intermediate

5.0/10

Years Exp

ping Intermediate

5.0/10

Years Exp

Traceroute Intermediate

5.0/10

Years Exp

Netstat Intermediate

5.0/10

Years Exp

Cisco Packet Tracer Intermediate

4.5/10

Years Exp

Work Experience

SOC Analyst L1

NCR Voyix

Oct 2024 - Jul 2026

Monitor and detect security anomalies across SIEM (Splunk, QRadar) and CrowdStrike Falcon EDR, triaging 20–25 daily incidents with 96% accuracy. Conduct in-depth threat investigations analyzing event logs, alert context, and endpoint behavior to determine root cause and scope. Perform IOC analysis using threat intelligence tools (VirusTotal, Triage sandbox) to analyze malware, phishing, and suspicious traffic. Execute incident response following MITRE ATT&CK framework, collaborating with senior analysts on high-risk threats. Assess cloud security posture and vulnerabilities using Wiz Cloud Security to escalate infrastructure misconfigurations. Contributed to reducing organization Zscaler risk score from 40+ to 26–29 in a 3-member team, achieving a 45% reduction in false positives.

IT Technical Support Engineer

NCR Corporation

Oct 2022 - Sep 2024

Delivered Tier-1 support for hardware, software, and network issues, resolving 50+ tickets weekly with 95%+ SLA adherence. Diagnosed and resolved complex Windows and macOS system issues to minimize user downtime across global operations. Participated in critical incident bridge calls handling P1/P2 issues during month-end operations with cross-functional teams. Authored organizational Knowledge Base articles and security awareness documentation for end-user self-help.

Network Support Engineer

Octa Networks

Mar 2021 - Apr 2022

Delivered technical support for networking hardware, routing, and LAN configurations in client enterprise environments. Installed and troubleshot network equipment and software using structured diagnostic procedures. Configured and maintained multi-location LAN infrastructure ensuring high network availability.