Abhay Karale

Security Analyst

HummingByte Technology

Present - Present

Monitored SIEM dashboards (Splunk) in real time to identify anomalous authentication, network, and endpoint activity across client environments. Performed first-level triage on daily security alerts, classifying true positives vs. false positives and escalating confirmed incidents to L2 analysts per SOP. Investigated phishing email reports by analyzing headers, sender reputation, and embedded links/attachments; coordinated takedown and user notification. Conducted log analysis across Windows Event Logs, Linux auth logs, and firewall logs to identify brute-force, scanning, and unauthorized access attempts, mapping behavior to MITRE ATT&CK. Maintained threat intelligence indicators (IPs, domains, hashes) using VirusTotal and AbuseIPDB, and documented incidents in ServiceNow/Jira for audit readiness. Participated in rotational shift coverage and shift handover reporting to ensure continuous monitoring and timely incident response.