Gurukiran Nagaraj

SOC Analyst L1

Davanagere, Karnataka 2+ yrs exp 85 · Excellent

About

Cybersecurity SOC Analyst L1 with 2.6 years of experience in SOC operations, specializing in incident investigation, log analysis, and security monitoring. Skilled in using IBM QRadar SIEM to analyze security events, investigate phishing incidents, validate Indicators of Compromise (IOCs), and perform Root Cause Analysis (RCA). Proven ability to reduce false positives, improve detection efficiency, and identify attack patterns through advanced log analysis.

Skills & Expertise (23)

SIEM Monitoring Advanced

8.0/10

2.6

Years Exp

IBM QRadar Advanced

8.0/10

2.6

Years Exp

Phishing Email Analysis Intermediate

7.5/10

2.6

Years Exp

False Positive Analysis Intermediate

7.5/10

2.6

Years Exp

Malware Alert Investigation Intermediate

7.5/10

2.6

Years Exp

Incident Identification Intermediate

7.5/10

2.6

Years Exp

Security Awareness Training Intermediate

7.0/10

2.6

Years Exp

Splunk Intermediate

7.0/10

2.6

Years Exp

VirusTotal Intermediate

7.0/10

2.6

Years Exp

Ticket Creation Intermediate

6.5/10

2.6

Years Exp

IBM Xforce Intermediate

6.5/10

2.6

Years Exp

Symantec EDR Intermediate

6.5/10

2.6

Years Exp

Windows Intermediate

6.0/10

2.6

Years Exp

Cortex SOAR Intermediate

6.0/10

2.6

Years Exp

Antivirus Intermediate

6.0/10

2.6

Years Exp

Basic Linux Intermediate

5.5/10

2.6

Years Exp

Qualys Intermediate

5.5/10

2.6

Years Exp

SMAX Intermediate

5.5/10

2.6

Years Exp

HTTPS HTTP DNS IP TCP

Work Experience

SOC Analyst L1 (Consultant)

Deloitte India LLP

Oct 2023 - Nov 2024

Hands-on experience on IBM QRadar SIEM and events generated by SIEM worked within SLA. Performed daily analysis of 100+ SIEM alerts, reduced false positives by 20%, to improve identification of true positive. According to priority, investigate suspicious activities, and escalate True positive incidents according to escalation matrix. Investigated security alerts by performing log analysis, network traffic analysis, and endpoint investigation. Conducted 24x7 real-time security monitoring, ensuring timely detection and response to threats. Demonstrated strong understanding of networking concepts (OSI model, TCP/IP, protocols, network devices). Preparing daily report of Pending Alert list, IOC Report (IP, Hash, Emil, Domain). Collaborated with Different teams to resolve incidents and implement preventive security measures. Maintained Standard Operating Procedure (SOP) documentation for detected threats, covering threat analysis, investigation, and mitigation procedures to ensure consistent incident response practices.

SOC Analyst L1

Crystal Solutions Ltd

May 2022 - Oct 2023

Monitored and analyzed real-time security alerts and events using IBM QRadar, performing initial triage to assess severity and impact. Investigated alerts using threat intelligence tools such as VirusTotal and AbuseIPDB. Conducted preliminary incident analysis, identifying false positives and escalating true positive incidents to L2 teams. Analyzed and responded to cloud security alerts, performing investigations to identify suspicious activities, assess risk, and support timely incident resolution. Monitored and prioritized security alerts according to SLA requirements, ensuring timely investigation, response, and escalation of security incidents. Provided security awareness training to users, helping them understand cybersecurity best practices, identify phishing attempts, follow password security guidelines, and maintain safe computing habits. Worked Daily Repots like Inbound & outbound connection, IP Blocking. Drafted detailed shift handover report to maintain operational continuity between shifts.