Santhosh

SOC Analyst

Hyderabad, Telangana 4+ yrs exp 89 · Excellent

About

L1 Security Analyst with 2+ years of experience in Security Operations Center (SOC) environments, specializing in real-time threat monitoring, alert triage, and incident response across Microsoft security ecosystems. Proficient in analyzing Windows Event Logs, network telemetry, and endpoint data using Cortex and Crowdsrike tools (XDR). Experienced in identifying and correlating Indicators of Compromise (IoCs), mapping threats to the MITRE ATT&CK framework and handling phishing, malware and identity-based attacks. Skilled in KQL-based investigations, incident escalation and SLA-driven operations. Proven ability to reduce false positives, improve detection efficiency and support 24/7 security operations while collaborating with cross-functional teams.

Skills & Expertise (67)

Windows Event Logs Intermediate

7.4/10

Years Exp

Splunk Intermediate

7.4/10

Years Exp

SIEM tools Intermediate

7.4/10

Years Exp

Indicators of Compromise Intermediate

7.2/10

Years Exp

CIA Triad Intermediate

7.0/10

Years Exp

Security monitoring Intermediate

7.0/10

Years Exp

Log Analysis Intermediate

7.0/10

Years Exp

IBM QRadar Intermediate

7.0/10

Years Exp

Security Log Analysis Intermediate

7.0/10

Years Exp

Microsoft Defender Intermediate

7.0/10

Years Exp

CrowdStrike Falcon Intermediate

7.0/10

Years Exp

MITRE ATT&CK Intermediate

7.0/10

Years Exp

Cyber Kill Chain Intermediate

6.8/10

Years Exp

Vulnerability Assessment Intermediate

6.8/10

Years Exp

KQL Intermediate

6.8/10

Years Exp

Data Protection Intermediate

6.8/10

Years Exp

Kusto Query Language Intermediate

6.8/10

Years Exp

Incident Response Intermediate

6.8/10

Years Exp

Incident escalation Intermediate

6.6/10

Years Exp

Encryption Intermediate

6.6/10

Years Exp

Detection Rules Intermediate

6.6/10

Years Exp

Hashing Intermediate

6.4/10

Years Exp

VPN Technologies Intermediate

6.4/10

Years Exp

vulnerabilities Intermediate

6.4/10

Years Exp

Threats Intermediate

6.4/10

Years Exp

Web Application Firewalls Intermediate

6.4/10

Years Exp

Firewalls Intermediate

6.4/10

Years Exp

IDS Intermediate

6.4/10

Years Exp

IPS Intermediate

6.4/10

Years Exp

Alert Triage Intermediate

6.4/10

Years Exp

ServiceNow Intermediate

6.4/10

Years Exp

Threat Hunting Intermediate

6.4/10

Years Exp

Cortex Intermediate

6.2/10

Years Exp

Security Reports Intermediate

6.2/10

Years Exp

Encoding Intermediate

6.0/10

Years Exp

Email Security Gateways Intermediate

6.0/10

Years Exp

Antivirus Intermediate

6.0/10

Years Exp

UDP Intermediate

6.0/10

Years Exp

subnetting Intermediate

6.0/10

Years Exp

port numbers Intermediate

6.0/10

Years Exp

Proxy Servers Intermediate

6.0/10

Years Exp

TCP Intermediate

6.0/10

Years Exp

Switch Intermediate

6.0/10

Years Exp

Router Intermediate

6.0/10

Years Exp

Static routing Intermediate

6.0/10

Years Exp

OSI Model Intermediate

6.0/10

Years Exp

OSPF Intermediate

6.0/10

Years Exp

VLAN Intermediate

6.0/10

Years Exp

IP Addressing Intermediate

6.0/10

Years Exp

Networking Concepts Intermediate

6.0/10

Years Exp

DHCP Intermediate

6.0/10

Years Exp

DNS Intermediate

6.0/10

Years Exp

SMTP Intermediate

6.0/10

Years Exp

SSH Intermediate

6.0/10

Years Exp

HTTPS Intermediate

6.0/10

Years Exp

HTTP Intermediate

6.0/10

Years Exp

ticketing tools Intermediate

6.0/10

Years Exp

EtherChannel Intermediate

5.6/10

Years Exp

Hub Intermediate

5.6/10

Years Exp

RIP Intermediate

5.6/10

Years Exp

STP Intermediate

5.6/10

Years Exp

FTP Intermediate

5.6/10

Years Exp

Telnet Intermediate

5.6/10

Years Exp

VTP Intermediate

5.6/10

Years Exp

SLA-driven operations malware Phishing

Work Experience

SOC Analyst

DAZN SOFTWARE PVT LTD

Mar 2024 - Present

Performed real-time monitoring, investigation, analysis, reporting, and escalation of security events from multiple log sources using SIEM tools. Reviewed system, network, and application logs to identify suspicious activities and raised incident tickets to the respective platform teams for remediation.