mrunal chinchole

Associate SOC Engineer

Baner, Pune, Maharashtra, India 2+ yrs exp 84 · Excellent

About

Cybersecurity professional with hands-on SOC experience progressing from SOC Intern to Associate SOC Engineer, currently working as an L1 analyst on the front line of enterprise threat monitoring. Skilled in SIEM platforms (Microsoft Sentinel, Splunk, IBM QRadar), KQL query writing for sign-in log analysis and incident triage, and SOAR/automation for incident response. Experienced in monitoring and triaging Microsoft Defender XDR and Microsoft Sentinel alerts, managing security cases end-to-end in ServiceNow, and securing email (SPF, DKIM, DMARC, Microsoft 365 Defender, Proofpoint) and endpoints (CrowdStrike, Microsoft Defender, Cybereason). Blocks and remediates IOCs as part of daily incident handling. Microsoft SC-200 (Security Operations Analyst Associate) certified, with strong grounding in MITRE ATT&CK and NIST Cybersecurity Framework. Confident presenter with experience leading weekly client calls to report on incident status and SOC performance. Proven track record of promotion from intern to associate engineer through consistent performance in threat detection and incident response.

Skills & Expertise (27)

Microsoft Defender XDR Intermediate

8.0/10

Years Exp

Microsoft Sentinel Intermediate

8.0/10

Years Exp

Microsoft 365 Defender Intermediate

8.0/10

Years Exp

KQL Intermediate

7.5/10

Years Exp

MITRE ATT&CK Intermediate

7.5/10

Years Exp

Post-Incident Analysis Intermediate

7.0/10

Years Exp

escalation Intermediate

7.0/10

Years Exp

ServiceNow Intermediate

7.0/10

Years Exp

NIST Cybersecurity Framework Intermediate

7.0/10

Years Exp

ProofPoint Intermediate

7.0/10

Years Exp

CrowdStrike Intermediate

7.0/10

Years Exp

Splunk Intermediate

7.0/10

Years Exp

Presentation Skills Intermediate

6.5/10

Years Exp

SOAR Playbooks Intermediate

6.5/10

Years Exp

Cybereason Intermediate

6.5/10

Years Exp

IBM QRadar Intermediate

6.5/10

Years Exp

Firewalls EDR IPS IDS Endpoint Protection Remediation IoC Identification DMARC DKIM SPF Sophos

Work Experience

Associate SOC Engineer

Futurism Technologies Pvt Ltd

Dec 2025 - Present

Work as an L1 analyst monitoring, investigating, and triaging security alerts generated in Microsoft Sentinel and Microsoft Defender XDR, identifying true positives and escalating confirmed threats per SOC procedures. Write and execute KQL queries in Microsoft Sentinel to analyze sign-in logs, investigate incidents, and correlate security events for accurate threat detection. Investigate and triage security incidents in Splunk, correlating log data across sources to support timely detection and response. Analyze email security incidents using SPF, DKIM, and DMARC validation to identify spoofing and phishing attempts within Microsoft 365 Defender and Proofpoint. Identify, block, and remediate IOCs across endpoint and email channels using CrowdStrike, Microsoft Defender, and Cybereason. Manage the full incident lifecycle in ServiceNow, including case creation, documentation, escalation, and closure, ensuring accurate and timely tracking of security cases. Apply MITRE ATT&CK and NIST Cybersecurity Framework mappings to classify alerts and guide response actions. Lead weekly client calls to present incident summaries and SOC performance reports, collaborating with senior analysts on incident response workflows and SOP documentation.

SOC Intern

Futurism Technologies Pvt Ltd

Jun 2025 - Dec 2025

Monitored and analyzed security events using Splunk, Microsoft Sentinel, and IBM QRadar. Investigated security alerts and incidents in IBM QRadar, documenting analysis, case status, and remediation actions in ServiceNow. Executed KQL queries for log analysis and threat detection. Automated incident response workflows using SOAR tools. Managed email security using Microsoft 365 Defender and Proofpoint. Conducted endpoint threat monitoring with CrowdStrike, Microsoft Defender, and Cybereason, and tracked incidents in ServiceNow. Completed Microsoft SC-200 Security Operations Analyst Associate certification during the internship.

Cyber Security Apprenticeship

Futurism Xpro

Nov 2024 - May 2025

Learned networking fundamentals, core cybersecurity principles, and SOC workflows. Conducted email and incident analysis exercises under supervision. Practiced hands-on labs in SIEM alert analysis and log investigation.

Cyber Security Intern

IBM Pvt. Ltd.

Aug 2024 - Oct 2024

Completed training on cybersecurity fundamentals and SIEM concepts. Gained foundational knowledge in networking, incident handling, and security monitoring. Worked on SIEM lab exercises to understand event correlation and alert analysis.