Nikhil Anachi
Security Analyst
About
Security Analyst with 4.5+ years of experience in Security Operations Center (SOC) environments, specializing in threat detection, incident response, phishing analysis, malware analysis, and threat hunting. Hands-on with Microsoft Sentinel (KQL), Splunk (SPL), Microsoft Defender, CrowdStrike, Carbon Black, and SOAR platforms across AWS and Azure environments. Strong working knowledge of the MITRE ATT&CK framework, Cyber Kill Chain, and CIA triad, with a proven record of fine-tuning detections to reduce false positives and documenting SOAR playbooks and incident handling processes for compliance and knowledge sharing.
Skills & Expertise (27)
Work Experience
Security Analyst
Wipro
May 2024 - Sep 2026
Monitored and triaged security alerts using Microsoft Sentinel, Microsoft Defender, and CrowdStrike, investigating suspicious activity and escalating confirmed incidents as per SOC procedures. Utilized KQL (Azure Sentinel) to perform advanced threat hunting and log analysis across endpoint, identity, and cloud telemetry. Performed phishing analysis (email headers, URLs, attachments) and malware analysis to identify indicators of compromise and determine incident scope and impact. Monitored and investigated security events across AWS and Azure environments, identifying misconfigurations and anomalous activity. Investigated DLP alerts to detect and prevent unauthorized data exfiltration and policy violations. Fine-tuned detection rules and analytics to reduce false positives and alert fatigue, improving alert quality and analyst efficiency. Mapped incidents to the MITRE ATT&CK framework and Cyber Kill Chain to understand attacker tactics and techniques; applied the CIA triad to assess impact and prioritize response. Worked with SOAR tools to automate repetitive triage and response tasks and support incident containment. Created and maintained documentation for SOAR playbooks, integrations, and incident handling processes to support knowledge sharing and compliance.
Security Analyst
Accenture
Feb 2022 - Jan 2024
Monitored enterprise security events in Splunk and used SPL (Splunk Processing Language) to perform advanced threat hunting and log analysis. Investigated endpoint alerts using Carbon Black and Microsoft Defender, including malicious process activity, suspicious file execution, and endpoint anomalies. Conducted malware analysis and phishing analysis to validate malicious indicators and recommend containment and remediation actions. Analyzed Windows and Linux system, authentication, and network logs to detect abnormal behavior and potential compromise. Tuned correlation searches and detection use cases to reduce false positives and improve detection accuracy. Aligned investigations with the MITRE ATT&CK framework and Cyber Kill Chain, and supported incident response activities including containment, eradication, and recovery. Monitored and responded to DLP alerts and supported SOAR-driven automation of routine SOC tasks. Documented investigations, incident reports, and standard operating procedures for SOC handover and audit readiness.
Project Associate (QA)
Accenture
Nov 2020 - Aug 2021
Contributed to Mapping, POI, Data Labeling, and Risk Management projects. Managed QA operations, ensuring strict adherence to quality standards and operational efficiency.
Education
B.Sc. Electronics - Bankatlal Badhruka College of Information, Hyderabad
- · Afghanistan
Certifications
No certifications added yet
Interested in this developer?
Profile Score Breakdown
Profile Overview
Skills (27)
Click a skill to find developers with the same skill
