Darshan Bg

SOC Analyst – IMSS Engineer

Happiest Minds Technologies Limited

Aug 2022 - Present

Managed 24x7 Security Operations Center (SOC) operations, covering real-time incident detection, tracking, analysis, and escalation across client environments. Monitored and investigated security alerts using SIEM platforms including Microsoft Sentinel, IBM QRadar, and Google Chronicle, identifying and escalating high-severity threats. Logged, tracked, and resolved security incidents through ServiceNow and ManageEngine ticketing systems, ensuring adherence to SLA requirements. Investigated and remediated endpoint threats using Microsoft Defender and CrowdStrike Falcon, reducing dwell time on active incidents. Executed SOC playbook procedures for phishing investigations, Windows security incidents, and Microsoft 365/Entra ID account compromise cases. Conducted log analysis and event correlation to identify Indicators of Compromise (IOCs) and malicious activity across client networks. Applied MITRE ATT&CK and NIST frameworks to support structured threat analysis and incident classification. Triaged and prioritized alerts based on severity, business impact, and relevance to client threat landscape. Maintained detailed incident documentation, including investigation steps, actions taken, and resolution outcomes, within client ticketing systems. Collaborated with client infrastructure, application, and compliance teams to ensure coordinated incident handling and resolution. Followed and refined client-specific response playbooks and standard operating procedures (SOPs). Prepared and delivered weekly and monthly security reports to stakeholders, summarizing incident trends and SOC performance. Ensured continuity of operations through clear, complete shift handover documentation.